1. How To Extract Sar File Online
  • This is a package format that is used to archive and deploy programs generated using JBoss or the older Phoenix development applications. SAPCAR application on Unix systems can extract and install contents of a SAR file.
  • Dec 27, 2013 Most of the files in SAP Service Market Place are in.SAR type. So, you need to use SAPCAR to extract the files. But, if you have multiple.SAR files (example, 200 hundreds!) – then, you need to know how to extract them in single shot as you are not going to extract them one by one! To do this, you can use one from the following commands.
  • How to Extract.RAR file in Windows 10? Step 1: Go to Step 2: Click on 'Downloads' Link. Step 3: Click on the version that you want to.

On the Solaris operating system, the sar command collects, reports, or saves system activity information.

Description

May 08, 2017 Go to command prompt,and then go to the folder.location(i,e C:/apps/sapcar - This folder is having SAPCAR exe file in it along with the other.sar files) 6. Type sapcar -xvf and then the full file name and press enter.Please see below example.

The sar command writes to standard output the contents of selected cumulative activity counters in the operating system. The accounting system, based on the values in the count and intervalparameters, writes information the specified number of times spaced at the specified intervals in seconds. If the interval parameter is set to zero, the sar command displays the average statistics for the time since the system was started. If the interval parameter is specified without the count parameter, then reports are generated continuously. The collected data can also be saved in the file specified by the -ofile name flag, in addition to being displayed onto the screen. If file name is omitted, sar uses the standard system activity daily data file, the /var/log/sysstat/sadd file, where the dd parameter indicates the current day. By default, all the data available from the kernel are saved in the data file.

The sar command extracts and writes to standard output records previously saved in a file. This file can be either the one specified by the -f flag or, by default, the standard system activity daily data file. It is also possible to enter -1, -2 (etc.) as an argument to sar to display data of that days ago. For example, -1 will point at the standard system activity file of yesterday.

Without the -P flag, the sar command reports system-wide (global among all processors) statistics, which are calculated as averages for values expressed as percentages, and as sums otherwise. If the -P flag is given, the sar command reports activity which relates to the specified processor or processors. If -P ALL is given, the sar command reports statistics for each processor and global statistics among all processors.

You can select information about specific system activities using flags. Not specifying any flags selects only CPU activity. Specifying the -A flag selects all possible activities.

The default version of the sar command (CPU utilization report) might be one of the first facilities the user runs to begin system activity investigation, because it monitors major system resources. If CPU utilization is near 100 percent (user + nice + system), the workload sampled is CPU-bound.

If multiple samples and multiple reports are desired, it is convenient to specify an output file for the sar command. Run the sar command as a background process. The syntax for this is:

All data are captured in binary form and saved to a file (datafile). The data can then be selectively displayed with the sar command using the -f option. Set the interval and count parameters to select count records at interval second intervals. If the count parameter is not set, all the records saved in the file will be selected. Collection of data in this manner is useful to characterize system usage over a period of time and determine peak usage hours.

Note: The sar command only reports on local activities.

Syntax

How To Extract Sar File

Options

-AThis option is equivalent to specifying -bBdHqrRSuvwWy -I SUM -I XALL -m ALL -n ALL -u ALL -P ALL.
-B

Report paging statistics. The following values are displayed:

pgpgin/sTotal number of kilobytes the system paged in from disk per second.
pgpgout/sTotal number of kilobytes the system paged out to disk per second.
fault/sNumber of page faults (major + minor) made by the system per second. This value is not a count of page faults that generate I/O, because some page faults can be resolved without I/O.
majflt/sNumber of major faults the system has made per second, those which have required loading a memory page from disk.
pgfree/sNumber of pages placed on the free list by the system per second.
pgscank/sNumber of pages scanned by the kswapddaemon per second.
pgscand/sNumber of pages scanned directly per second.
pgsteal/sNumber of pages the system has reclaimed from cache (page cache and swap cache) per second to satisfy its memory demands.
%vmeffCalculated as pgsteal / pgscan, this is a metric of the efficiency of page reclaim. If it is near 100% then almost every page coming off the tail of the inactive list is being reaped. If it gets too low (e.g., less than 30%) then the virtual memory is having some difficulty. This field is displayed as zero if no pages have been scanned during the interval of time.
-b

Report I/O and transfer rate statistics. The following values are displayed:

tpsTotal number of transfers per second that were issued to physical devices. A transfer is an I/O request to a physical device. Multiple logical requests can be combined into a single I/O request to the device. A transfer is of indeterminate size.
rtpsTotal number of read requests per second issued to physical devices.
wtpsTotal number of write requests per second issued to physical devices.
bread/sTotal amount of data read from the devices in blocks per second. Blocks are equivalent to sectors and therefore have a size of 512 bytes.
bwrtn/sTotal amount of data written to devices in blocks per second.
-CWhen reading data from a file, tell sar to display comments that have been inserted by sadc.
-d

Report activity for each block device. When data are displayed, the device specification devm-n is generally used ( DEV column). m is the major number of the device and n its minor number. Device names may also be pretty-printed if option -p is used or persistent device names can be printed if option -j is used (see below). Note that disk activity depends on sadc options '-S DISK' and '-S XDISK' to be collected. The following values are displayed:

tpsIndicate the number of transfers per second that were issued to the device. Multiple logical requests can be combined into a single I/O request to the device. A transfer is of indeterminate size.
rd_sec/sNumber of sectors read from the device. The size of a sector is 512 bytes.
wr_sec/sNumber of sectors written to the device. The size of a sector is 512 bytes.
avgrq-szThe average size (in sectors) of the requests that were issued to the device.
avgqu-szThe average queue length of the requests that were issued to the device.
awaitThe average time (in milliseconds) for I/O requests issued to the device to be served. This value includes the time spent by the requests in queue and the time spent servicing them.
svctmThe average service time (in milliseconds) for I/O requests that were issued to the device. Warning: Do not trust this field any more. This field will be removed in a future sysstat version.
%utilPercentage of CPU time during which I/O requests were issued to the device (bandwidth utilization for the device). Device saturation occurs when this value is close to 100%.
-e [hh:mm:ss]Set the ending time of the report. The default ending time is 18:00:00. Hours must be given in 24-hour format. This option can be used when data are read from or written to a file (options -f or -o ).
-F

Display statistics for currently mounted filesystems. Pseudo-filesystems are ignored. At the end of the report, sar displays a summary of all those filesystems. The following values are displayed:

MBfsfreeTotal amount a free space in megabytes (including space available only to privileged user).
MBfsusedTotal amount of space used in megabytes.
%fsusedPercentage of filesystem space used, as seen by a privileged user.
%ufsusedPercentage of filesystem space used, as seen by an unprivileged user.
IfreeTotal number of free file nodes in filesystem.
IusedTotal number of file nodes used in filesystem.
%IusedPercentage of file nodes used in filesystem.
-f [file name]Extract records from file name (created by the -ofile name flag). The default value of the file name parameter is the current daily data file, the /var/log/sysstat/sadd file. The -f option is exclusive of the -o option.
-H

Report hugepages utilization statistics. The following values are displayed:

kbhugfreeAmount of hugepages memory in kilobytes that is not yet allocated.
kbhugusedAmount of hugepages memory in kilobytes that has been allocated.
%hugusedPercentage of total hugepages memory that has been allocated.
-hDisplay a short help message, and exit.
-I {int [,..] SUMALLXALL}Report statistics for a given interrupt. The int is the interrupt number. Specifying multiple -Iint parameters on the command line will look at multiple independent interrupts. The SUM keyword indicates that the total number of interrupts received per second is to be displayed. The ALL keyword indicates that statistics from the first 16 interrupts are to be reported, whereas the XALL keyword indicates that statistics from all interrupts, including potential APIC interrupt sources, are to be reported. Note that interrupt statistics depend on sadc option '-S INT' to be collected.
-iintervalSelect data records at seconds as close as possible to the number specified by the interval parameter.
-j {IDLABELPATHUUID ..}Display persistent device names. Use this option in conjunction with option -d. Options ID, LABEL, etc. specify the type of the persistent name. These options are not limited; the only prerequisite is that a directory with required persistent names is present in /dev/disk. If persistent name is not found for the device, the device name is pretty-printed (see option -p below).
-m {keyword [,..] ALL}

Report power management statistics. Note that these statistics depend on sadc option '-S POWER' to be collected.

Possible keywords are CPU, FAN, FREQ, IN, TEMP and USB.

With the CPU keyword, statistics about CPU are reported. The following value is displayed:

MHzInstantaneous CPU clock frequency in MHz.

With the FAN keyword, statistics about fans speed are reported. The following values are displayed:

rpmFan speed expressed in revolutions per minute.
drpmThis field is calculated as the difference between current fan speed (rpm) and its low limit (fan_min).
DEVICESensor device name.

With the FREQ keyword, statistics about CPU clock frequency are reported. The following value is displayed:

wghMHzWeighted average CPU clock frequency in MHz. Note that the cpufreq-stats driver must be compiled in the kernel for this option to work.

With the IN keyword, statistics about voltage inputs are reported. The following values are displayed:

inVVoltage input expressed in Volts.
%inRelative input value. A value of 100% means that voltage input has reached its high limit (in_max) whereas a value of 0% means that it has reached its low limit (in_min).
DEVICESensor device name.

With the TEMP keyword, statistics about device temperatures are reported. The following values are displayed:

degCDevice temperature expressed in degrees Celsius.
%tempRelative device temperature. A value of 100% means that temperature has reached its high limit (temp_max).
DEVICESensor device name.

With the USB keyword, the sar command takes a snapshot of all the USB devices currently plugged into the system. At the end of the report, sar will display a summary of all those USB devices. The following values are displayed:

BUSRoot hub number of the USB device.
idvendorVendor ID number (assigned by USB organization).
idprodProduct ID number (assigned by Manufacturer).
maxpowerMaximum power consumption of the device (expressed in mA).
manufactManufacturer name.
productProduct name.
-n {keyword [,..] ALL}

Report network statistics.

Possible keywords are DEV, EDEV, NFS, NFSD, SOCK, IP, EIP, ICMP, EICMP, TCP, ETCP, UDP, SOCK6, IP6, EIP6, ICMP6, EICMP6 and UDP6.

With the DEV keyword, statistics from the network devices are reported. The following values are displayed:

IFACEName of the network interface for which statistics are reported.
rxpck/sTotal number of packets received per second.
txpck/sTotal number of packets transmitted per second.
rxkB/sTotal number of kilobytes received per second.
txkB/sTotal number of kilobytes transmitted per second.
rxcmp/sNumber of compressed packets received per second (for cslip etc.).
txcmp/sNumber of compressed packets transmitted per second.
rxmcst/sNumber of multicast packets received per second.

With the EDEV keyword, statistics on failures (errors) from the network devices are reported. The following values are displayed:

IFACEName of the network interface for which statistics are reported.
rxerr/sTotal number of bad packets received per second.
txerr/sTotal number of errors that happened per second while transmitting packets.
coll/sNumber of collisions that happened per second while transmitting packets.
rxdrop/sNumber of received packets dropped per second because of a lack of space in linux buffers.
txdrop/sNumber of transmitted packets dropped per second because of a lack of space in linux buffers.
txcarr/sNumber of carrier-errors that happened per second while transmitting packets.
rxfram/sNumber of frame alignment errors that happened per second on received packets.
rxfifo/sNumber of FIFO overrun errors that happened per second on received packets.
txfifo/sNumber of FIFO overrun errors that happened per second on transmitted packets.

With the NFS keyword, statistics about NFS client activity are reported. The following values are displayed:

call/sNumber of RPC requests made per second.
retrans/sNumber of RPC requests per second, those which needed to be retransmitted (for example because of a server timeout).
read/sNumber of 'read' RPC calls made per second.
write/sNumber of 'write' RPC calls made per second.
access/sNumber of 'access' RPC calls made per second.
getatt/sNumber of 'getattr' RPC calls made per second.

With the NFSD keyword, statistics about NFS server activity are reported. The following values are displayed:

scall/sNumber of RPC requests received per second.
badcall/sNumber of bad RPC requests received per second, those whose processing generated an error.
packet/sNumber of network packets received per second.
udp/sNumber of UDP packets received per second.
tcp/sNumber of TCP packets received per second.
hit/sNumber of reply cache hits per second.
miss/sNumber of reply cache misses per second.
sread/sNumber of 'read' RPC calls received per second.
swrite/sNumber of 'write' RPC calls received per second.
saccess/sNumber of 'access' RPC calls received per second.
sgetatt/sNumber of 'getattr' RPC calls received per second.

With the SOCK keyword, statistics on sockets in use are reported (IPv4). The following values are displayed:

totsckTotal number of sockets used by the system.
tcpsckNumber of TCP sockets currently in use.
udpsckNumber of UDP sockets currently in use.
rawsckNumber of RAW sockets currently in use.
ip-fragNumber of IP fragments currently in queue.
tcp-twNumber of TCP sockets in TIME_WAIT state.

With the IP keyword, statistics about IPv4 network traffic are reported. Note that IPv4 statistics depend on sadc option '-S SNMP' to be collected. The following values are displayed (formal SNMP names between square brackets):

irec/sThe total number of input datagrams received from interfaces per second, including those received in error [ipInReceives].
fwddgm/sThe number of input datagrams per second, for which this entity was not their final IP destination, as a result of which an attempt was made to find a route to forward them to that final destination [ipForwDatagrams].
idel/sThe total number of input datagrams successfully delivered per second to IP user-protocols (including ICMP) [ipInDelivers].
orq/sThe total number of IP datagrams which local IP user-protocols (including ICMP) supplied per second to IP in requests for transmission [ipOutRequests]. Note that this counter does not include any datagrams counted in fwddgm/s.
asmrq/sThe number of IP fragments received per second which needed to be reassembled at this entity [ipReasmReqds].
asmok/sThe number of IP datagrams successfully re-assembled per second [ipReasmOKs].
fragok/sThe number of IP datagrams that have been successfully fragmented at this entity per second [ipFragOKs].
fragcrt/sThe number of IP datagram fragments that have been generated per second as a result of fragmentation at this entity [ipFragCreates].

With the EIP keyword, statistics about IPv4 network errors are reported. Note that IPv4 statistics depend on sadc option '-S SNMP' to be collected. The following values are displayed (formal SNMP names between square brackets):

ihdrerr/sThe number of input datagrams discarded per second due to errors in their IP headers, including bad checksums, version number mismatch, other format errors, time-to-live exceeded, errors discovered in processing their IP options, etc. [ipInHdrErrors]
iadrerr/sThe number of input datagrams discarded per second because the IP address in their IP header's destination field was not a valid address to be received at this entity. This count includes invalid addresses (e.g., 0.0.0.0) and addresses of unsupported Classes (e.g., Class E). For entities that are not IP routers and therefore do not forward datagrams, this counter includes datagrams discarded because the destination address was not a local address [ipInAddrErrors].
iukwnpr/sThe number of locally-addressed datagrams received successfully but discarded per second because of an unknown or unsupported protocol [ipInUnknownProtos].
idisc/sThe number of input IP datagrams per second for which no problems were encountered to prevent their continued processing, but which were discarded (e.g., for lack of buffer space) [ipInDiscards]. Note that this counter does not include any datagrams discarded while awaiting re-assembly.
odisc/sThe number of output IP datagrams per second for which no problem was encountered to prevent their transmission to their destination, but which were discarded (e.g., for lack of buffer space) [ipOutDiscards]. Note that this counter would include datagrams counted in fwddgm/s if any such packets met this (discretionary) discard criterion.
onort/sThe number of IP datagrams discarded per second because no route could be found to transmit them to their destination [ipOutNoRoutes]. Note that this counter includes any packets counted in fwddgm/s which meet this 'no-route' criterion. Note that this includes any datagrams which a host cannot route because all of its default routers are down.
asmf/sThe number of failures detected per second by the IP re-assembly algorithm (for whatever reason: timed out, errors, etc) [ipReasmFails]. Note that this is not necessarily a count of discarded IP fragments since some algorithms can lose track of the number of fragments by combining them as they are received.
fragf/sThe number of IP datagrams that have been discarded per second because they needed to be fragmented at this entity but could not be, e.g., because their Don't Fragment flag was set [ipFragFails].

With the ICMP keyword, statistics about ICMPv4 network traffic are reported. Note that ICMPv4 statistics depend on sadc option '-S SNMP' to be collected. The following values are displayed (formal SNMP names between square brackets):

imsg/sThe total number of ICMP messages which the entity received per second [icmpInMsgs]. Note that this counter includes all those counted by ierr/s.
omsg/sThe total number of ICMP messages which this entity attempted to send per second [icmpOutMsgs]. Note that this counter includes all those counted by oerr/s.
iech/sThe number of ICMP Echo (request) messages received per second [icmpInEchos].
iechr/sThe number of ICMP Echo Reply messages received per second [icmpInEchoReps].
oech/sThe number of ICMP Echo (request) messages sent per second [icmpOutEchos].
oechr/sThe number of ICMP Echo Reply messages sent per second [icmpOutEchoReps].
itm/sThe number of ICMP Timestamp (request) messages received per second [icmpInTimestamps].
itmr/sThe number of ICMP Timestamp Reply messages received per second [icmpInTimestampReps].
otm/sThe number of ICMP Timestamp (request) messages sent per second [icmpOutTimestamps].
otmr/sThe number of ICMP Timestamp Reply messages sent per second [icmpOutTimestampReps].
iadrmk/sThe number of ICMP Address Mask Request messages received per second [icmpInAddrMasks].
iadrmkr/sThe number of ICMP Address Mask Reply messages received per second [icmpInAddrMaskReps].
oadrmk/sThe number of ICMP Address Mask Request messages sent per second [icmpOutAddrMasks].
oadrmkr/sThe number of ICMP Address Mask Reply messages sent per second [icmpOutAddrMaskReps].

With the EICMP keyword, statistics about ICMPv4 error messages are reported. Note that ICMPv4 statistics depend on sadc option '-S SNMP' to be collected. The following values are displayed (formal SNMP names between square brackets):

ierr/sThe number of ICMP messages per second which the entity received but determined as having ICMP-specific errors (bad ICMP checksums, bad length, etc.) [icmpInErrors].
oerr/sThe number of ICMP messages per second which this entity did not send due to problems discovered within ICMP such as a lack of buffers [icmpOutErrors].
idstunr/sThe number of ICMP Destination Unreachable messages received per second [icmpInDestUnreachs].
odstunr/sThe number of ICMP Destination Unreachable messages sent per second [icmpOutDestUnreachs].
itmex/sThe number of ICMP Time Exceeded messages received per second [icmpInTimeExcds].
otmex/sThe number of ICMP Time Exceeded messages sent per second [icmpOutTimeExcds].
iparmpb/sThe number of ICMP Parameter Problem messages received per second [icmpInParmProbs].
oparmpb/sThe number of ICMP Parameter Problem messages sent per second [icmpOutParmProbs].
isrcq/sThe number of ICMP Source Quench messages received per second [icmpInSrcQuenchs].
osrcq/sThe number of ICMP Source Quench messages sent per second [icmpOutSrcQuenchs].
iredir/sThe number of ICMP Redirect messages received per second [icmpInRedirects].
oredir/sThe number of ICMP Redirect messages sent per second [icmpOutRedirects].

With the TCP keyword, statistics about TCPv4 network traffic are reported. Note that TCPv4 statistics depend on sadc option '-S SNMP' to be collected. The following values are displayed (formal SNMP names between square brackets):

active/sThe number of times TCP connections have made a direct transition to the SYN-SENT state from the CLOSED state per second [tcpActiveOpens].
passive/sThe number of times TCP connections have made a direct transition to the SYN-RCVD state from the LISTEN state per second [tcpPassiveOpens].
iseg/sThe total number of segments received per second, including those received in error [tcpInSegs]. This count includes segments received on currently established connections.
oseg/sThe total number of segments sent per second, including those on current connections but excluding those containing only retransmitted octets [tcpOutSegs].

With the ETCP keyword, statistics about TCPv4 network errors are reported. Note that TCPv4 statistics depend on sadc option '-S SNMP' to be collected. The following values are displayed (formal SNMP names between square brackets):

atmptf/sThe number of times per second TCP connections have made a direct transition to the CLOSED state from either the SYN-SENT state or the SYN-RCVD state, plus the number of times per second TCP connections have made a direct transition to the LISTEN state from the SYN-RCVD state [tcpAttemptFails].
estres/sThe number of times per second TCP connections have made a direct transition to the CLOSED state from either the ESTABLISHED state or the CLOSE-WAIT state [tcpEstabResets].
retrans/sThe total number of segments retransmitted per second; that is, the number of TCP segments transmitted containing one or more previously transmitted octets [tcpRetransSegs].
isegerr/sThe total number of segments received in error (e.g., bad TCP checksums) per second [tcpInErrs].
orsts/sThe number of TCP segments sent per second containing the RST flag [tcpOutRsts].

With the UDP keyword, statistics about UDPv4 network traffic are reported. Note that UDPv4 statistics depend on sadc option '-S SNMP' to be collected. The following values are displayed (formal SNMP names between square brackets):

idgm/sThe total number of UDP datagrams delivered per second to UDP users [udpInDatagrams].
odgm/sThe total number of UDP datagrams sent per second from this entity [udpOutDatagrams].
noport/sThe total number of received UDP datagrams per second for which there was no application at the destination port [udpNoPorts].
dgmerr/sThe number of received UDP datagrams per second that could not be delivered for reasons other than the lack of an application at the destination port [udpInErrors].

With the SOCK6 keyword, statistics on sockets in use are reported (IPv6). Note that IPv6 statistics depend on sadc option '-S IPV6' to be collected. The following values are displayed:

tcp6sckNumber of TCPv6 sockets currently in use.
udp6sckNumber of UDPv6 sockets currently in use.
raw6sckNumber of RAWv6 sockets currently in use.
ip6-fragNumber of IPv6 fragments currently in use.

With the IP6 keyword, statistics about IPv6 network traffic are reported. Note that IPv6 statistics depend on sadc option '-S IPV6' to be collected. The following values are displayed (formal SNMP names between square brackets):

irec6/sThe total number of input datagrams received from interfaces per second, including those received in error [ipv6IfStatsInReceives].
fwddgm6/sThe number of output datagrams per second which this entity received and forwarded to their final destinations [ipv6IfStatsOutForwDatagrams].
idel6/sThe total number of datagrams successfully delivered per second to IPv6 user-protocols (including ICMP) [ipv6IfStatsInDelivers].
orq6/sThe total number of IPv6 datagrams which local IPv6 user-protocols (including ICMP) supplied per second to IPv6 in requests for transmission [ipv6IfStatsOutRequests]. Note that this counter does not include any datagrams counted in fwddgm6/s.
asmrq6/sThe number of IPv6 fragments received per second which needed to be reassembled at this interface [ipv6IfStatsReasmReqds].
asmok6/sThe number of IPv6 datagrams successfully reassembled per second [ipv6IfStatsReasmOKs].
imcpck6/sThe number of multicast packets received per second by the interface [ipv6IfStatsInMcastPkts].
omcpck6/sThe number of multicast packets transmitted per second by the interface [ipv6IfStatsOutMcastPkts].
fragok6/sThe number of IPv6 datagrams that have been successfully fragmented at this output interface per second [ipv6IfStatsOutFragOKs].
fragcr6/sThe number of output datagram fragments that have been generated per second as a result of fragmentation at this output interface [ipv6IfStatsOutFragCreates].

With the EIP6 keyword, statistics about IPv6 network errors are reported. Note that IPv6 statistics depend on sadc option '-S IPV6' to be collected. The following values are displayed (formal SNMP names between square brackets):

ihdrer6/sThe number of input datagrams discarded per second due to errors in their IPv6 headers, including version number mismatch, other format errors, hop count exceeded, errors discovered in processing their IPv6 options, etc. [ipv6IfStatsInHdrErrors]
iadrer6/sThe number of input datagrams discarded per second because the IPv6 address in their IPv6 header's destination field was not a valid address to be received at this entity. This count includes invalid addresses (e.g., ::0) and unsupported addresses (e.g., addresses with unallocated prefixes). For entities that are not IPv6 routers and therefore do not forward datagrams, this counter includes datagrams discarded because the destination address was not a local address [ipv6IfStatsInAddrErrors].
iukwnp6/sThe number of locally-addressed datagrams received successfully but discarded per second because of an unknown or unsupported protocol [ipv6IfStatsInUnknownProtos].
i2big6/sThe number of input datagrams that could not be forwarded per second because their size exceeded the link MTU of outgoing interface [ipv6IfStatsInTooBigErrors].
idisc6/sThe number of input IPv6 datagrams per second for which no problems were encountered to prevent their continued processing, but which were discarded (e.g., for lack of buffer space) [ipv6IfStatsInDiscards]. Note that this counter does not include any datagrams discarded while awaiting re-assembly.
odisc6/sThe number of output IPv6 datagrams per second for which no problem was encountered to prevent their transmission to their destination, but which were discarded (e.g., for lack of buffer space) [ipv6IfStatsOutDiscards]. Note that this counter would include datagrams counted in fwddgm6/s if any such packets met this (discretionary) discard criterion.
inort6/sThe number of input datagrams discarded per second because no route could be found to transmit them to their destination [ipv6IfStatsInNoRoutes].
onort6/sThe number of locally generated IP datagrams discarded per second because no route could be found to transmit them to their destination [unknown formal SNMP name].
asmf6/sThe number of failures detected per second by the IPv6 re-assembly algorithm (for whatever reason: timed out, errors, etc.) [ipv6IfStatsReasmFails]. Note that this is not necessarily a count of discarded IPv6 fragments since some algorithms can lose track of the number of fragments by combining them as they are received.
fragf6/sThe number of IPv6 datagrams that have been discarded per second because they needed to be fragmented at this output interface but could not be [ipv6IfStatsOutFragFails].
itrpck6/sThe number of input datagrams discarded per second because datagram frame didn't carry enough data [ipv6IfStatsInTruncatedPkts].

With the ICMP6 keyword, statistics about ICMPv6 network traffic are reported. Note that ICMPv6 statistics depend on sadc option '-S IPV6' to be collected. The following values are displayed (formal SNMP names between square brackets):

imsg6/sThe total number of ICMP messages received by the interface per second which includes all those counted by ierr6/s [ipv6IfIcmpInMsgs].
omsg6/sThe total number of ICMP messages which this interface attempted to send per second [ipv6IfIcmpOutMsgs].
iech6/sThe number of ICMP Echo (request) messages received by the interface per second [ipv6IfIcmpInEchos].
iechr6/sThe number of ICMP Echo Reply messages received by the interface per second [ipv6IfIcmpInEchoReplies].
oechr6/sThe number of ICMP Echo Reply messages sent by the interface per second [ipv6IfIcmpOutEchoReplies].
igmbq6/sThe number of ICMPv6 Group Membership Query messages received by the interface per second [ipv6IfIcmpInGroupMembQueries].
igmbr6/sThe number of ICMPv6 Group Membership Response messages received by the interface per second [ipv6IfIcmpInGroupMembResponses].
ogmbr6/sThe number of ICMPv6 Group Membership Response messages sent per second [ipv6IfIcmpOutGroupMembResponses].
igmbrd6/sThe number of ICMPv6 Group Membership Reduction messages received by the interface per second [ipv6IfIcmpInGroupMembReductions].
ogmbrd6/sThe number of ICMPv6 Group Membership Reduction messages sent per second [ipv6IfIcmpOutGroupMembReductions].
irtsol6/sThe number of ICMP Router Solicit messages received by the interface per second [ipv6IfIcmpInRouterSolicits].
ortsol6/sThe number of ICMP Router Solicitation messages sent by the interface per second [ipv6IfIcmpOutRouterSolicits].
irtad6/sThe number of ICMP Router Advertisement messages received by the interface per second [ipv6IfIcmpInRouterAdvertisements].
inbsol6/sThe number of ICMP Neighbor Solicit messages received by the interface per second [ipv6IfIcmpInNeighborSolicits].
onbsol6/sThe number of ICMP Neighbor Solicitation messages sent by the interface per second [ipv6IfIcmpOutNeighborSolicits].
inbad6/sThe number of ICMP Neighbor Advertisement messages received by the interface per second [ipv6IfIcmpInNeighborAdvertisements].
onbad6/sThe number of ICMP Neighbor Advertisement messages sent by the interface per second [ipv6IfIcmpOutNeighborAdvertisements].

With the EICMP6 keyword, statistics about ICMPv6 error messages are reported. Note that ICMPv6 statistics depend on sadc option '-S IPV6' to be collected. The following values are displayed (formal SNMP names between square brackets):

ierr6/sThe number of ICMP messages per second which the interface received but determined as having ICMP-specific errors (bad ICMP checksums, bad length, etc.) [ipv6IfIcmpInErrors]
idtunr6/sThe number of ICMP Destination Unreachable messages received by the interface per second [ipv6IfIcmpInDestUnreachs].
odtunr6/sThe number of ICMP Destination Unreachable messages sent by the interface per second [ipv6IfIcmpOutDestUnreachs].
itmex6/sThe number of ICMP Time Exceeded messages received by the interface per second [ipv6IfIcmpInTimeExcds].
otmex6/sThe number of ICMP Time Exceeded messages sent by the interface per second [ipv6IfIcmpOutTimeExcds].
iprmpb6/sThe number of ICMP Parameter Problem messages received by the interface per second [ipv6IfIcmpInParmProblems].
oprmpb6/sThe number of ICMP Parameter Problem messages sent by the interface per second [ipv6IfIcmpOutParmProblems].
iredir6/sThe number of Redirect messages received by the interface per second [ipv6IfIcmpInRedirects].
oredir6/sThe number of Redirect messages sent by the interface by second [ipv6IfIcmpOutRedirects].
ipck2b6/sThe number of ICMP Packet Too Big messages received by the interface per second [ipv6IfIcmpInPktTooBigs].
opck2b6/sThe number of ICMP Packet Too Big messages sent by the interface per second [ipv6IfIcmpOutPktTooBigs].

At%26t unlock my phone website. With the UDP6 keyword, statistics about UDPv6 network traffic are reported. Note that UDPv6 statistics depend on sadc option '-S IPV6' to be collected. The following values are displayed (formal SNMP names between square brackets):

idgm6/sThe total number of UDP datagrams delivered per second to UDP users [udpInDatagrams].
odgm6/sThe total number of UDP datagrams sent per second from this entity [udpOutDatagrams].
noport6/sThe total number of received UDP datagrams per second for which there was no application at the destination port [udpNoPorts].
idgmer6/sThe number of received UDP datagrams per second that could not be delivered for reasons other than the lack of an application at the destination port [udpInErrors].
The ALL keyword is equivalent to specifying all the keywords above and therefore all the network activities are reported.
-o [file name]Save the readings in the file in binary form. Each reading is in a separate record. The default value of the file name parameter is the current daily data file, the /var/log/sysstat/sadd file. The -o option is exclusive of the -f option. All the data available from the kernel are saved in the file (in fact, sar calls its data collector sadc with the option '-S ALL'.
-P {cpu [,..] ALL}Report per-processor statistics for the specified processor or processors. Specifying the ALL keyword reports statistics for each processor, and globally for all processors. Note that processor 0 is the first processor.
-pPretty-print device names. Use this option in conjunction with option -d. By default, names are printed as devm-n where m and n are the major and minor numbers for the device. Use of this option displays the names of the devices as they (should) appear in /dev. Name mappings are controlled by /etc/sysstat/sysstat.ioconf.
-qReport queue length and load averages. The following values are displayed:
runq-szRun queue length (number of tasks waiting for run time).
plist-szNumber of tasks in the task list.
ldavg-1System load average for the last minute. The load average is calculated as the average number of runnable or running tasks (R state), and the number of tasks in uninterruptible sleep (D state) over the specified interval.
ldavg-5System load average for the past 5 minutes.
ldavg-15System load average for the past 15 minutes.
blockedNumber of tasks currently blocked, waiting for I/O to complete.
-RReport memory statistics. The following values are displayed:
frmpg/sNumber of memory pages freed by the system per second. A negative value represents a number of pages allocated by the system. Note that a page has a size of 4 kiB or 8 kiB according to the machine architecture.
bufpg/sNumber of additional memory pages used as buffers by the system per second. A negative value means fewer pages used as buffers by the system.
campg/sNumber of additional memory pages cached by the system per second. A negative value means fewer pages in the cache.
-rReport memory utilization statistics. The following values are displayed:
kbmemfreeAmount of free memory available in kilobytes.
kbmemusedAmount of used memory in kilobytes. This value does not take into account memory used by the kernel itself.
%memusedPercentage of used memory.
kbbuffersAmount of memory used as buffers by the kernel in kilobytes.
kbcachedAmount of memory used to cache data by the kernel in kilobytes.
kbcommitAmount of memory in kilobytes needed for current workload. This value is an estimate of how much RAM/swap is needed to guarantee that there never is out of memory.
%commitPercentage of memory needed for current workload in relation to the total amount of memory (RAM+swap). This number may be greater than 100% because the kernel usually overcommits memory.
kbactiveAmount of active memory in kilobytes (memory that has been used more recently and usually not reclaimed unless absolutely necessary).
kbinactAmount of inactive memory in kilobytes (memory which has been less recently used. It is more eligible to be reclaimed for other purposes).
kbdirtyAmount of memory in kilobytes waiting to get written back to the disk.
-SReport swap space utilization statistics. The following values are displayed:
kbswpfreeAmount of free swap space in kilobytes.
kbswpusedAmount of used swap space in kilobytes.
%swpusedPercentage of used swap space.
kbswpcadAmount of cached swap memory in kilobytes. This value is memory that once was swapped out, is swapped back in but still also is in the swap area (if memory is needed it doesn't need to be swapped out again because it is already in the swap area. This saves I/O).
%swpcadPercentage of cached swap memory in relation to the amount of used swap space.
-s [hh:mm:ss]Set the starting time of the data, causing the sar command to extract records time-tagged at, or following, the time specified. The default starting time is 08:00:00. Hours must be given in 24-hour format. This option can be used only when data are read from a file (option -f ).
-tWhen reading data from a daily data file, indicate that sar should display the timestamps in the original local time of the data file creator. Without this option, the sar command displays the timestamps in the user's locale time.
-u [ALL]Report CPU utilization. The ALL keyword indicates that all the CPU fields should be displayed. The report may show the following fields:
%userPercentage of CPU utilization that occurred while executing at the user level (application). Note that this field includes time spent running virtual processors.
%usrPercentage of CPU utilization that occurred while executing at the user level (application). Note that this field does NOT include time spent running virtual processors.
%nicePercentage of CPU utilization that occurred while executing at the user level with nice priority.
%systemPercentage of CPU utilization that occurred while executing at the system level (kernel). Note that this field includes time spent servicing hardware and software interrupts.
%sysPercentage of CPU utilization that occurred while executing at the system level (kernel). Note that this field does NOT include time spent servicing hardware or software interrupts.
%iowaitPercentage of time that the CPU or CPUs were idle during which the system had an outstanding disk I/O request.
%stealPercentage of time spent in involuntary wait by the virtual CPU or CPUs while the hypervisor was servicing another virtual processor.
%irqPercentage of time spent by the CPU or CPUs to service hardware interrupts.
%softPercentage of time spent by the CPU or CPUs to service software interrupts.
%guestPercentage of time spent by the CPU or CPUs to run a virtual processor.
%gnicePercentage of time spent by the CPU or CPUs to run a niced guest.
%idlePercentage of time that the CPU or CPUs were idle and the system did not have an outstanding disk I/O request.
Note: On SMP machines a processor that does not have any activity at all (0.00 for every field) is a disabled (offline) processor.
-VPrint version number then exit.
-vReport status of inode, file and other kernel tables. The following values are displayed:
dentunusdNumber of unused cache entries in the directory cache.
file-nrNumber of file handles used by the system.
inode-nrNumber of inode handlers used by the system.
pty-nrNumber of pseudo-terminals used by the system.
-WReport swapping statistics. The following values are displayed:
pswpin/sTotal number of swap pages the system brought in per second.
pswpout/sTotal number of swap pages the system brought out per second.
-wReport task creation and system switching activity.
proc/sTotal number of tasks created per second.
cswch/sTotal number of context switches per second.
-y

Report TTY devices activity. The following values are displayed:

rcvin/sNumber of receive interrupts per second for current serial line. Serial line number is given in the TTY column.
xmtin/sNumber of transmit interrupts per second for current serial line.
framerr/sNumber of frame errors per second for current serial line.
prtyerr/sNumber of parity errors per second for current serial line.
brk/sNumber of breaks per second for current serial line.
ovrun/sNumber of overrun errors per second for current serial line.

Environment

The sar command takes into account the following environment variables:

S_TIME_FORMATIf this variable exists and its value is ISO then the current locale will be ignored when printing the date in the report header. The sar command will use the ISO 8601 format (YYYY-MM-DD) instead.
S_TIME_DEF_TIMEIf this variable exists and its value is UTC then sar will save its data in UTC time (data will still be displayed in local time). sar will also use UTC time instead of local time to determine the current daily data file located in the /var/log/sysstat directory. This variable may be useful for servers with users located across several timezones.

Files

/var/log/sysstat/saddIndicate the daily data file, where the dd parameter is a number representing the day of the month.
/proccontains various files with system statistics.

Examples

Report CPU utilization for each 2 seconds. 5 lines are displayed.

Report statistics on IRQ 14 for each 2 seconds. 10 lines are displayed. Data are stored in a file called int14.file.

Display memory and network statistics saved in daily data file 'sa16'.

Display all the statistics saved in current daily data file.

Related commands

How To Extract Sar File Online

iostat — Report CPU and I/O statistics for devices and partitions.
vmstat — Report statistics about virtual memory usage.