On Tuesday 12 April 2005 11:41, Steve Grubb wrote: > The reason I ask...is what if during shutdown, the rate is exceeded or the > backlog becomes full, thus triggering a panic before shutdown of the audit > daemon completes? And the followup...if the kernel panic's due to rate limit exceeded or backlog full, do we need to log the shutdown reason? -Steve