Patch to auparse to handle out of order messages 3 of 3

Steve Grubb sgrubb at redhat.com
Thu Jan 7 22:31:01 UTC 2016


On Wednesday, January 06, 2016 09:30:36 PM Burn Alting wrote:
> #3 - modify the standard auparse() test code.

And this patch is applied. Thanks, Burn, for all the patches! This will make 
analytical programs much more accurate since interlaced records won't split an 
event up any more.

If anyone wants to try out the new audit code from svn please send any 
feedback asap. (Same with other bug reports.) I am aiming for a release in the 
next 2 days. I just have to finish working on Richard's audit by process name 
patch and then its time to release a new package.

-Steve




More information about the Linux-audit mailing list