On Wednesday 11 June 2008 17:22:27 Dave Quigley wrote: > If you ausearch -m avc -i you will get syscall numbers translated to > names as expected. I then tried aureport -a and instead of seeing > syscall names I see the numbers. aureport also takes the "-i" param to interpret numbers to names. Please give that a try. -Steve