I went to add myself to the status bit mask in audit.h and I saw this: #define AUDIT_STATUS_ENABLED 0x0001 #define AUDIT_STATUS_FAILURE 0x0002 #define AUDIT_STATUS_PID 0x0004 #define AUDIT_STATUS_RATE_LIMIT 0x0008 -->#define AUDIT_STATUS_BACKLOG_LIMIT 0x0010 Isn't that technically a bug? -- - Timothy R. Chavez