Trusted Solaris Audit Administration presents the structure for every token and byte sizes for each component. To help you get an idea of how to read the records and determine record size if space is a concern, the subject token structure is presented here.
Token ID |
Audit ID |
User ID |
Group ID |
Real user ID |
Real group ID |
Process ID |
Session ID |
Device ID |
Machine ID |
subject |
zelda |
root |
other |
root |
other |
1774 |
348 |
0 0 |
phoenix |
1 byte |
4 bytes |
4 bytes |
4 bytes |
4 bytes |
4 bytes |
4 bytes |
4 bytes |
4 bytes |
4 bytes |