On Thursday 05 May 2005 17:06, Linda Knippers wrote: > I'm curious because on my system, I can lose audit records without much load > at all, but I'm running the default auditd.conf. What version are you using and what is your priority_boost setting? -Steve