socket Token

The socket token contains information that describes an Internet socket. This token has six fields:

• A token ID that identifies this token as a socket token

• A socket type field that indicates the type of socket referenced, one of TCP, UDP, or UNIX

• The local port address

• The local Internet address

• The remote port address

• The remote Internet address

The praudit command displays the socket token as follows:

socket,0x0000,0x0000,0.0.0.0,0x0000,0.0.0.0

Since the Solaris 8 release, the Internet address can be displayed in IPv4 format or IPv6 format. The IPv4 address uses 4 bytes. The IPv6 address uses 16 bytes to describe the type, and 16 bytes to describe the address. The following figure shows the format of a socket token.

Figure 23–25 socket Token Format