AIX

AIX

Connect with fellow AIX users and experts to gain knowledge, share insights, and solve problems.


#Power
#Power
 View Only

  • 1.  Audit Stream data format

    Posted Thu January 22, 2015 03:10 AM

    Originally posted by: SingWong


    Hi

    I am a developer and hope to do some advance filtering and reformating on the audit output. Because of performance, I don't want to parse the text output by auditpr and hope to read in the binary format instead. I search for a long time and do not find a document describing the data format. 

    I want to ask if it is feasible and any document available for developer?

    Thanks for all suggestions.

    Sing


    #AIX-Forum


  • 2.  Re: Audit Stream data format

    Posted Sat January 24, 2015 08:49 AM

    Originally posted by: j.gann


    check out /usr/include/sys/audit.h

    auditread() and auditread_r() should be of use...

     

    jg


    #AIX-Forum


  • 3.  Re: Audit Stream data format

    Posted Tue January 27, 2015 01:30 AM

    Originally posted by: SingWong


    Thanks so much. That's what I need. Is there any example on how to use those audit system calls?


    #AIX-Forum


Related Content