#include <nwaudit.h> or #include <nwnet.h>N_EXTERN_LIBRARY NWRCODE NWADReadBitMap (NWCONN_HANDLE conn, nuint32 auditID, NWAuditBitMap N_FAR buffer, nuint16 bufferSize);
NWADReadBitMap only works for a volume.
NWAuditMap is a 512-bit stream. If a bit is set to one (1), the corresponding item found in auditBitMapIDs enumeration is being audited.
NWAuditBitMap may also be read by calling NWReadAuditConfigHeader.
When a bit in auditBitMapID is set to one, it generates an event and saves it in the audit file. The definition of the set bits follow:
Bit | Function | Description |
---|---|---|
A_BIT_GOPEN_FILE | Global Open | Specifies all file opens are audited |
A_BIT_IOPEN_FILE | Intersection Open | Specifies the intersection of events by a user or a file open is audited |
A_BIT_UOPEN_FILE | Union Open | Specifies the union of events by a user and a file open is audited. |
------------------------------------------------------------ | Bit | Function | Description | |-----------------|-------------------|---------------------| | A_BIT_GOPEN_FILE| Global Open | Specifies all file | | | | opens are audited | |-----------------|-------------------|---------------------| | A_BIT_IOPEN_FILE| Intersection Open| Specifies the | | | | intersection of | | | | events by a user or| | | | a file open is | | | | audited | |-----------------|-------------------|---------------------| | A_BIT_UOPEN_FILE| Union Open | Specifies the union| | | | of events by a user| | | | and a file open is | | | | audited. | |-----------------|-------------------|---------------------|
auditBitMapID lists the bits defined by the event bit map in the audit file configuration header. The first 32 bits are reserved for Directory Services for container auditing.
NWADReadBitMap is only supported on NetWare 4.1. It is not supported on trusted NetWare.
Auditing