{0 - 21;0};

//0 login event error=0 userID = 0
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
0,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//1 createlink event
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
5,				//u_short event;
0,				//long error;
16,				//long status;
"/tmp/script",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"/tmp/link",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//2 rename event
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
42,				//u_short event;
0,				//long error;
16,				//long status;
"/tmp/link",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"/tmp/link1",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//3 rename event
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
42,				//u_short event;
0,				//long error;
16,				//long status;
"/tmp/link1",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"/tmp/-link2",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}


//4 exec link event
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
1,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
7,				//u_short event;
0,				//long error;
16,				//long status;
"/tmp/-link2",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}


//5 exec link event
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
1,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
7,				//u_short event;
0,				//long error;
16,				//long status;
"/tmp/-link2",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}


//6 delete link event
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
1,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6,				//u_short event;
0,				//long error;
16,				//long status;
"/tmp/-link2",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}


//7 logout event userID = 0
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
1,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
99,				//u_short event;
0,				//long error;
16,				//long status;
"empty",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//8 login event error=1 userID = 1
SolarisRecord
{
1, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
1,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}


//9 login event error=1 userID = 0
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
1,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//10 login event error=1 userID = 0
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
1,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}


//11 login event error=1 userID = 2
SolarisRecord
{
2, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
1,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//12 login event error=1 userID = 3
SolarisRecord
{
3, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
1,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//13 login event error=0 userID = 3
SolarisRecord
{
3, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
0,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}


//14 login event error=0 userID = 2
SolarisRecord
{
2, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
0,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}


//15 login event error=0 userID = 1
SolarisRecord
{
1, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
0,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//16 logout event userID = 1
SolarisRecord
{
1, 				//long audit_id;
1,				//long egid;
1,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
99,				//u_short event;
0,				//long error;
16,				//long status;
"empty",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//17 logout event userID = 2
SolarisRecord
{
2, 				//long audit_id;
1,				//long egid;
1,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
99,				//u_short event;
0,				//long error;
16,				//long status;
"empty",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//18 logout event userID = 3
SolarisRecord
{
3, 				//long audit_id;
1,				//long egid;
1,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
99,				//u_short event;
0,				//long error;
16,				//long status;
"empty",	//char *rname;
2,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"etwas",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}

//19 login event error=1 userID = 0
SolarisRecord
{
0, 				//long audit_id;
1,				//long egid;
0,				//long euid;
1,				//long rgid;
0,				//long ruid;
0,				//u_long tty;
0,				//u_long woher;
13247,		//long pid;
0,				//long session_id;
1046701964,//long time;
128,			//u_long classes;
6152,			//u_short event;
1,		//long error;
16,				//long status;
"empty",	//char *rname;
-1,				//long rowner;
-1,				//long rgowner;
-1,				//long rperm;
"empty",	//char *rscript;
0,				//u_long rinode;
"empty",	//char *rmount;
"empty",	//char *rrname;
"empty",	//char *arg;
"empty",	//char *env;
"julia"		//char *host;
}


//20 SUID script execution
SolarisRecord
{
2450, 				//long audit_id;
265543,				//long egid;
0,						//long euid;
1,						//long rgid;
0,						//long ruid;
0,						//u_long tty;
0,						//u_long woher;
1,						//long pid;
0,						//long session_id;
254,					//long time;
128,					//u_long classes;
7,						//u_short event;
48756,				//long error;
21,						//long status;
"-link",			//char *rname;
-1,						//long rowner;
-1,						//long rgowner;
2057,					//long rperm;
"scriptname",	//char *rscript;
0,						//u_long rinode;
"empty",			//char *rmount;
"-link",			//char *rrname;
"empty",			//char *arg;
"empty",			//char *env;
"julius"			//char *host;
}


//21 SUID script fork
SolarisRecord
{
2450, 				//long audit_id;
265543,				//long egid;
0,						//long euid;
1,						//long rgid;
0,						//long ruid;
0,						//u_long tty;
0,						//u_long woher;
1,						//long pid;
0,						//long session_id;
254,					//long time;
128,					//u_long classes;
2,						//u_short event;
48756,				//long error;
11,						//long status;
"-link",			//char *rname;
-1,						//long rowner;
-1,						//long rgowner;
2057,					//long rperm;
"scriptname",	//char *rscript;
0,						//u_long rinode;
"empty",			//char *rmount;
"-link",			//char *rrname;
"empty",			//char *arg;
"empty",			//char *env;
"julius"			//char *host;
}
