From mboxrd@z Thu Jan 1 00:00:00 1970 From: LC Bruzenak Subject: Re: auparse question Date: Fri, 06 Jun 2008 14:53:33 -0500 Message-ID: <1212782013.6726.32.camel@homeserver> References: <1212780014.6726.26.camel@homeserver> <1212781001.15953.12.camel@amilo> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Return-path: In-Reply-To: <1212781001.15953.12.camel@amilo> List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: linux-audit-bounces@redhat.com Errors-To: linux-audit-bounces@redhat.com To: Miloslav =?UTF-8?Q?Trma=C4=8D?= Cc: Linux Audit List-Id: linux-audit@redhat.com On Fri, 2008-06-06 at 19:36 +0000, Miloslav Trma=C4=8D wrote: ... > One usual way of handling spaces is to use the hex-encoded form for > field representation, and decode it either using > auparse_interpret_field() (which hard-codes the ways to decode specific > field types, and does nothing for unknown types), or in the application= . > The other usual way of handling spaces is to just write them in the > record and let the applications deal with them however they want (you > can get the raw record text out of auparse, after all). Fair enough; thanks for the response.=20 Yes, I am able to get the raw string out and I can sub-parse it myself. Up to this point the parser was doing all the work for me! :) Thx! LCB. --=20 LC (Lenny) Bruzenak lenny@magitekltd.com