BSM not writing audit logs

From: John England (john_w_england@yahoo.com)
Date: Wed Sep 17 2003 - 17:44:35 EDT


All;

I am attempting to setup BSM.
After running bsmconv and auditing the
audit control file it appears the
audit logs aren't writing properly, audit information
isn't being properly collected. I set the
audit_control
to collect everything so the logs should grow rapidly
but
after a couple of hours the logs are less than 1k.
When I do a truss on auditd it is just sleeping. I
let the truss run for over 2 hours and still nothing.
I verified that the c2audit module is loaded.

Below is what I get from the praudit command. It just
hangs. Any ideas would be greatly appreciated.

We are running bsm on a v1280, with solaris 8 and the
latest patch cluster.

Any ideas would be greatly appreciated

# praudit 20030915143824.20030915152006.sitesupport02
file,Mon Sep 15 14:38:24 2003, + 637408 msec,
header,102,2,open(2) - read,,Mon Sep 15 15:00:00 2003,
+ 564603400 msec
path,/etc/.name_service_door
subject,root,root,adm,root,adm

John

__________________________________
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
_______________________________________________
sunmanagers mailing list
sunmanagers@sunmanagers.org
http://www.sunmanagers.org/mailman/listinfo/sunmanagers



This archive was generated by hypermail 2.1.7 : Wed Apr 09 2008 - 23:27:08 EDT