The arbitrary token encapsulates data for the audit trail. This token consists of four fixed fields and an array of data. The fixed fields are as follows:
A token ID that identifies this token as an arbitrary token
A suggested print format field, such as hexadecimal
An item size field that specifies the size of the data that is encapsulated, such as short
A count field that provides the number of following items
The remainder of the token is composed of count of the specified type. The praudit command displays the arbitrary token as follows:
arbitrary,decimal,int,1 42 |
The following table shows the possible values of the print format field.
Table 31–5 Values for the arbitrary Token's Print Format Field
Value |
Action |
---|---|
AUP_BINARY |
Prints the date in binary format |
AUP_OCTAL |
Prints the date in octal format |
AUP_DECIMAL |
Prints the date in decimal format |
AUP_HEX |
Prints the date in hexadecimal format |
AUP_STRING |
Prints the date as a string |
The following table shows the possible values of the item size field.
Table 31–6 Values for the arbitrary Token's Item Size Field
Value |
Action |
---|---|
AUR_BYTE |
Data is printed in units of bytes in 1 byte |
AUR_SHORT |
Data is printed in units of shorts in 2 bytes |
AUR_LONG |
Data is printed in units of longs in 4 bytes |