The arbitrary token encapsulates data for the audit trail. It consists of four fixed fields and an array of data. The item array may have a number of items. The fields are:
A token ID
A suggested format, such as decimal
A size of encapsulated data, such as int
A count of the data array items
An item array
The following figure shows the token format.
The print format field can take the values shown in Table B–2.
Table B–2 arbitrary Token Print Format Field Values
Value |
Action |
---|---|
AUP_BINARY |
Print date in binary |
AUP_OCTAL |
Print date in octal |
AUP_DECIMAL |
Print date in decimal |
AUP_HEX |
Print date in hex |
AUP_STRING |
Print date as a string |
The item size field can take the values shown in Table B–3.
Table B–3 arbitrary Token Item Size Field Values
Value |
Action |
---|---|
AUR_BYTE |
Data is in units of bytes (1 byte) |
AUR_SHORT |
Data is in units of shorts (2 bytes) |
AUR_LONG |
Data is in units of longs (4 bytes) |
AUR_LONGLONG |
Data is in units of longlongs (8 bytes) |
An arbitrary token is displayed by praudit as follows:
arbitrary,decimal,int,1 42