Audit trails.

[Jesse W. Asher]

I've been trying to make some sense of the audit trails produced by
auditd but I haven't been having much luck.  audit.log(5) shows what all
the various records are for adding an entry in the audit.log, but it
doesn't show what the possible values are and what they mean.  I know
what "read uid" is.  But what is "audit uid" and what are the possible
values for "type"?  These are the kinds of questions I need answered
because I would like to write some report producing mechanism that will
make the audit.log more readable.  Can anyone recommend some reading on
the audit.log that will tell me this information or does anyone have
such a formatting tools already designed?  


-- 
      Jesse W. Asher        NIC Handle:  JA268         Phone: (901)386-5061
                       Health Sphere of America Inc.
	       5125 Elmore Rd., Suite 1, Memphis, TN 38134
 Internet: jessea at homecare.COM                 UUCP: ...!banana!homecare!jessea