From mboxrd@z Thu Jan 1 00:00:00 1970 From: Leam Hall Subject: How to identify failed syscalls Date: Fri, 25 Oct 2013 06:26:20 -0400 Message-ID: <526A474C.1010902@gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii"; Format="flowed" Content-Transfer-Encoding: 7bit Return-path: Received: from mx1.redhat.com (ext-mx13.extmail.prod.ext.phx2.redhat.com [10.5.110.18]) by int-mx02.intmail.prod.int.phx2.redhat.com (8.13.8/8.13.8) with ESMTP id r9PAQOZr001021 for ; Fri, 25 Oct 2013 06:26:24 -0400 Received: from mail-gg0-f176.google.com (mail-gg0-f176.google.com [209.85.161.176]) by mx1.redhat.com (8.14.4/8.14.4) with ESMTP id r9PAQMKW012660 for ; Fri, 25 Oct 2013 06:26:22 -0400 Received: by mail-gg0-f176.google.com with SMTP id g9so280282ggc.35 for ; Fri, 25 Oct 2013 03:26:22 -0700 (PDT) Received: from [192.168.1.196] (c-71-62-66-192.hsd1.va.comcast.net. [71.62.66.192]) by mx.google.com with ESMTPSA id g25sm10076558yhg.6.2013.10.25.03.26.20 for (version=TLSv1 cipher=RC4-SHA bits=128/128); Fri, 25 Oct 2013 03:26:21 -0700 (PDT) List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com List-Id: linux-audit@redhat.com Running aureport gives me a lot of failed syscalls. How do I identify what syscalls are failing and what is calling them? Thanks! Leam -- http://31challenge.net http://31challenge.net/insight