atom feed2 messages in org.freebsd.trustedbsd-auditauditreduce syntax
FromSent OnAttachments
Todd HeberleinFeb 18, 2011 10:37 am 
Christian PeronSep 13, 2011 6:18 am 
Subject:auditreduce syntax
From:Todd Heberlein (todd@mac.com)
Date:Feb 18, 2011 10:37:43 am
List:org.freebsd.trustedbsd-audit

I'm trying to use auditreduce to filter on audit records from a specific
process, but I'm not getting any output. (I am doing this on Mac 10.6.6). Do I
have the syntax wrong?

I'm doing something like:

$ auditreduce -o pid=202 exp51.bsm | praudit

Thanks,

Todd

_______________________________________________ trus@FreeBSD.org mailing list http://lists.freebsd.org/mailman/listinfo/trustedbsd-audit To unsubscribe, send any mail to "trus@FreeBSD.org"