socket Token

The socket token contains information that describes an Internet socket. This token has six fields:

• a token ID that identifies this token as a socket token

• a socket type field that indicates the type of socket referenced (TCP/UDP/UNIX)

• the local port address

• the local Internet address

• the remote port address

• the remote Internet address

The praudit command displays the socket token as follows:

socket,0x0000,0x0000,0.0.0.0,0x0000,0.0.0.0

For the Solaris 8 release, the Internet address can be displayed as a IPv4 address that uses 4 bytes, or as an IPv6 address that uses 16 bytes to describe the type, and 16 bytes to describe the addresses. The following figure shows the format of a socket token.

Figure 25–25 socket Token Format