When a program issues a
fork(), the activity of the child
process is not included in the accounting data for the parent process.
That is, when the program issues a fork(), the child process
has its own SMF type 30 records. The parent's type 30 records do
not include the activity of the child process. However, you can associate
the parent process with the child process using the following: - The process user ID, specified in the SMF30OUI field
- The process user group, specified in the SMF30OUG field
- The process session ID (SID), specified in the SMF30OSI field
- The process parent ID, specified in the SMF30OPP field
The field SMF30EXN provides the name of the program that was run.
It is specified as up to 16 characters. After a fork(),
the child process runs the same program as the parent. The program
name of the child matches that of the parent at the time of the fork().
For more information about the contents of the SMF30EXN, see Accounting for exec functions.