Qrcheong,
> whats that IIRC refers too? I can understand that 10.35.11.178 comes
> from the first string-0A230BB2. But the next string? And what can that
> tells you?
>
IIRC = If I Recall Correctly.
Network addresses are stored as an array of bytes, ie;
* Network address type - 1 byte
* Network address length - 1 byte
* Network address - variable length
Types are 1=IPX, 2=IP (several other are used as well, ie AFP etc). You
use the type when decoding the address. Problem is that Auditcon only
knows IPX and thus never checks the address type, so in your example it
tries to decode an IP address as an IPX one, ie network:node. The node
part is undefined for an IP address so in your example:
0A230BB2:4C802E004300
0A230BB2 = IP Address
4C802E004300 = Garbage
If you use SetAud, then it decodes those addresses correctly.
- Anders Gustafsson (Sysop)
The Aaland Islands (N60 E20)
Novell has a new enhancement request system,
or what is now known as the requirement portal.
If customers would like to give input in the upcoming
releases of Novell products then they should go to
http://www.novell.com/rms
Re: Auditcon
Threaded Mode
