seq Token

The seq token (sequence token) is an optional token that contains a sequence number. Used for debugging, this token is added to each audit record when the seq policy is active. The seq token has two fields:

• a token ID that identifies this token as a seq token

• a 32-bit unsigned long field that contains the sequence number

The sequence number is incremented every time an audit record is generated and added to the audit trail. The praudit command displays the seq token as follows:

sequence,1292

The following figure shows the format of a seq token.

Figure 25–24 seq Token Format

The seq token is output only when the seq audit policy is active.