The auditfltr command

The auditfltr command provides for the portability of audit event log files among different machine architectures. Since log files are binary data, and different machine architectures represent data differently (e.g., size of an integer, big-endian or little-endian representation), moving log files from one system to another is not always as simple as copying the files.

The auditfltr(1M) command is used to solve this problem. It translates data in the audit event log file into a transportable form known as XDR (External Data Representation). An audit event log file may be translated from native machine format to XDR format or from XDR format to native machine format. See ``XDR/RPC protocol specification'' for more information on the XDR format.

It will be necessary to use the auditfltr(1M) command if you are planning to process audit event log files on a machine with a different architecture then the one in which they were created. If audit event log files are moved among machines of the same architecture no additional processing is required.

The following options are available:

-i type

Specifies the type of the input. The input is always taken from standard input.

-o type

Specifies the type of the output file. The output is always sent to standard output. The output should be redirected, for example to a file or pipe, due to its data format.

If an invalid combination of conversion types is requested the following error message is displayed and processing is terminated:

invalid combination of conversion types

If no options are specified it is assumed the input file is in native machine format and the output file is in XDR format.