Changeset View
Changeset View
Standalone View
Standalone View
head/contrib/openbsm/man/audit.log.5
| Show First 20 Lines • Show All 96 Lines • ▼ Show 20 Lines | |||||
| a 64-bit | a 64-bit | ||||
| .Dq header | .Dq header | ||||
| token can be created using | token can be created using | ||||
| .Xr au_to_header64 3 . | .Xr au_to_header64 3 . | ||||
| .Bl -column -offset 3n ".No Terminal Address Type/Length" ".No N bytes + 1 NUL" | .Bl -column -offset 3n ".No Terminal Address Type/Length" ".No N bytes + 1 NUL" | ||||
| .It Sy "Field Bytes Description" | .It Sy "Field Bytes Description" | ||||
| .It "Token ID 1 byte Token ID" | .It "Token ID 1 byte Token ID" | ||||
| .It "Record Byte Count 4 bytes Number of bytes in record" | .It "Record Byte Count 4 bytes Number of bytes in record" | ||||
| .It "Version Number 2 bytes Record version number" | .It "Version Number 1 byte Record version number" | ||||
| .It "Event Type 2 bytes Event type" | .It "Event Type 2 bytes Event type" | ||||
| .It "Event Modifier 2 bytes Event sub-type" | .It "Event Modifier 2 bytes Event sub-type" | ||||
| .It "Seconds 4/8 bytes Record time stamp (32/64-bits)" | .It "Seconds 4/8 bytes Record time stamp (32/64-bits)" | ||||
| .It "Nanoseconds 4/8 bytes Record time stamp (32/64-bits)" | .It "Nanoseconds 4/8 bytes Record time stamp (32/64-bits)" | ||||
| .El | .El | ||||
| .Ss Expanded Header Token | .Ss Expanded Header Token | ||||
| The | The | ||||
| .Dq expanded header | .Dq expanded header | ||||
| token is an expanded version of the | token is an expanded version of the | ||||
| .Dq header | .Dq header | ||||
| token, with the addition of a machine IPv4 or IPv6 address. | token, with the addition of a machine IPv4 or IPv6 address. | ||||
| A 32-bit extended | A 32-bit extended | ||||
| .Dq header | .Dq header | ||||
| token can be created using | token can be created using | ||||
| .Xr au_to_header32_ex 3 ; | .Xr au_to_header32_ex 3 ; | ||||
| a 64-bit extended | a 64-bit extended | ||||
| .Dq header | .Dq header | ||||
| token can be created using | token can be created using | ||||
| .Xr au_to_header64_ex 3 . | .Xr au_to_header64_ex 3 . | ||||
| .Bl -column -offset 3n ".No Terminal Address Type/Length" ".No N bytes + 1 NUL" | .Bl -column -offset 3n ".No Terminal Address Type/Length" ".No N bytes + 1 NUL" | ||||
| .It Sy "Field Bytes Description" | .It Sy "Field Bytes Description" | ||||
| .It "Token ID 1 byte Token ID" | .It "Token ID 1 byte Token ID" | ||||
| .It "Record Byte Count 4 bytes Number of bytes in record" | .It "Record Byte Count 4 bytes Number of bytes in record" | ||||
| .It "Version Number 2 bytes Record version number" | .It "Version Number 1 byte Record version number" | ||||
| .It "Event Type 2 bytes Event type" | .It "Event Type 2 bytes Event type" | ||||
| .It "Event Modifier 2 bytes Event sub-type" | .It "Event Modifier 2 bytes Event sub-type" | ||||
| .It "Address Type/Length 1 byte Host address type and length" | .It "Address Type/Length 1 byte Host address type and length" | ||||
| .It "Machine Address 4/16 bytes IPv4 or IPv6 address" | .It "Machine Address 4/16 bytes IPv4 or IPv6 address" | ||||
| .It "Seconds 4/8 bytes Record time stamp (32/64-bits)" | .It "Seconds 4/8 bytes Record time stamp (32/64-bits)" | ||||
| .It "Nanoseconds 4/8 bytes Record time stamp (32/64-bits)" | .It "Nanoseconds 4/8 bytes Record time stamp (32/64-bits)" | ||||
| .El | .El | ||||
| .Ss Trailer Token | .Ss Trailer Token | ||||
| ▲ Show 20 Lines • Show All 182 Lines • ▼ Show 20 Lines | |||||
| .It "Audit ID 4 bytes Audit user ID" | .It "Audit ID 4 bytes Audit user ID" | ||||
| .It "Effective User ID 4 bytes Effective user ID" | .It "Effective User ID 4 bytes Effective user ID" | ||||
| .It "Effective Group ID 4 bytes Effective group ID" | .It "Effective Group ID 4 bytes Effective group ID" | ||||
| .It "Real User ID 4 bytes Real user ID" | .It "Real User ID 4 bytes Real user ID" | ||||
| .It "Real Group ID 4 bytes Real group ID" | .It "Real Group ID 4 bytes Real group ID" | ||||
| .It "Process ID 4 bytes Process ID" | .It "Process ID 4 bytes Process ID" | ||||
| .It "Session ID 4 bytes Audit session ID" | .It "Session ID 4 bytes Audit session ID" | ||||
| .It "Terminal Port ID 4/8 bytes Terminal port ID (32/64-bits)" | .It "Terminal Port ID 4/8 bytes Terminal port ID (32/64-bits)" | ||||
| .It "Terminal Address Type/Length 1 byte Length of machine address" | .It "Terminal Address Type/Length 4 bytes Length of machine address" | ||||
| .It "Terminal Machine Address 4 bytes IPv4 or IPv6 address of machine" | .It "Terminal Machine Address 4 bytes IPv4 or IPv6 address of machine" | ||||
| .El | .El | ||||
| .Ss Return Token | .Ss Return Token | ||||
| The | The | ||||
| .Dq return | .Dq return | ||||
| token contains a system call or library function return condition, including | token contains a system call or library function return condition, including | ||||
| return value and error number associated with the global variable | return value and error number associated with the global variable | ||||
| .Er errno . | .Er errno . | ||||
| ▲ Show 20 Lines • Show All 334 Lines • Show Last 20 Lines | |||||