From mboxrd@z Thu Jan 1 00:00:00 1970 From: Steve Grubb Subject: Re: Patch to auparse to handle out of order messages 3 of 3 Date: Thu, 07 Jan 2016 17:31:01 -0500 Message-ID: <5860216.amsKJMebuE@x2> References: <1452076236.26850.89.camel@swtf.swtf.dyndns.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: <1452076236.26850.89.camel@swtf.swtf.dyndns.org> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: linux-audit@redhat.com, burn@swtf.dyndns.org List-Id: linux-audit@redhat.com On Wednesday, January 06, 2016 09:30:36 PM Burn Alting wrote: > #3 - modify the standard auparse() test code. And this patch is applied. Thanks, Burn, for all the patches! This will make analytical programs much more accurate since interlaced records won't split an event up any more. If anyone wants to try out the new audit code from svn please send any feedback asap. (Same with other bug reports.) I am aiming for a release in the next 2 days. I just have to finish working on Richard's audit by process name patch and then its time to release a new package. -Steve