Steve Grubb said the following on 2008-8-27 3:20: I also found that 1 type "AUDIT_ANOM_ROOT_TRANS" was not in this table and should be added. Type ANOM_ROOT_TRANS should be recognized in 'msg_typetab.h'. Signed-off-by: Peng Haitao <penght(a)cn.fujitsu.com&gt; --- lib/msg_typetab.h | 1 + 1 files changed, 1 insertions(+), 0 deletions(-) diff --git a/lib/msg_typetab.h b/lib/msg_typetab.h index 92441a4..9e57670 100644 --- a/lib/msg_typetab.h +++ b/lib/msg_typetab.h @@ -142,6 +142,7 @@ _S(AUDIT_ANOM_MK_EXEC, "ANOM_MK_EXEC" ) _S(AUDIT_ANOM_ADD_ACCT, "ANOM_ADD_ACCT" ) _S(AUDIT_ANOM_DEL_ACCT, "ANOM_DEL_ACCT" ) _S(AUDIT_ANOM_MOD_ACCT, "ANOM_MOD_ACCT" ) +_S(AUDIT_ANOM_ROOT_TRANS, "ANOM_ROOT_TRANS" ) _S(AUDIT_RESP_ANOMALY, "RESP_ANOMALY" ) _S(AUDIT_RESP_ALERT, "RESP_ALERT" ) _S(AUDIT_RESP_KILL_PROC, "RESP_KILL_PROC" ) -- 1.5.3 -- Regards Peng Haitao