Steve Grubb wrote: > With backwards compatibility you don't have to worry about having tools of > that era. > This does not address the problem of matching a log file to a kernel version nor unanticipated user space provided audit records. -- John Dennis <jdennis at redhat.com>