96  * privstrlen              2 bytes
97  * privstr                 N bytes + 1 (\0 byte)
120  * privtstrlen		2 bytes
121  * privtstr		N bytes + 1
122  * privstrlen		2 bytes
123  * privstr		N bytes + 1
149  * argument value          4 bytes/8 bytes (32-bit/64-bit value)
150  * text length             2 bytes
151  * text                    N bytes + 1 terminating NULL byte
211  * file access mode        4 bytes
212  * owner user ID           4 bytes
213  * owner group ID          4 bytes
214  * file system ID          4 bytes
215  * node ID                 8 bytes
216  * device                  4 bytes/8 bytes (32-bit/64-bit)
234 	 * BSD defines the size for the file mode as 2 bytes; BSM defines 4  in au_to_attr32()
283 	 * BSD defines the size for the file mode as 2 bytes; BSM defines 4  in au_to_attr64()
385  * status		   4 bytes
386  * return value            4 bytes
416  * number groups           2 bytes
417  * group list              count * 4 bytes
441  * internet address        4 bytes
461  * address type/length     4 bytes
462  * address                16 bytes
484  * ip header		   20 bytes
507  * object ID               4 bytes
528  * owner user ID           4 bytes
529  * owner group ID          4 bytes
530  * creator user ID         4 bytes
531  * creator group ID        4 bytes
532  * access mode             4 bytes
533  * slot sequence #         4 bytes
534  * key                     4 bytes
554 	 * Some systems define the sizes for ipc_perm members as 2 bytes;  in au_to_ipc_perm()
606  * port IP address         2 bytes
626  * size                    2 bytes
627  * data                    size bytes
630 au_to_opaque(const char *data, u_int16_t bytes)  in au_to_opaque()  argument
635 	GET_TOKEN_AREA(t, dptr, sizeof(u_char) + sizeof(u_int16_t) + bytes);  in au_to_opaque()
640 	ADD_U_INT16(dptr, bytes);  in au_to_opaque()
641 	ADD_MEM(dptr, data, bytes);  in au_to_opaque()
648  * seconds of time         4 bytes
649  * milliseconds of time    4 bytes
650  * file name len           2 bytes
651  * file pathname           N bytes + 1 terminating NULL byte
682  * text length             2 bytes
683  * text                    N bytes + 1 terminating NULL byte
710  * path length             2 bytes
711  * path                    N bytes + 1 terminating NULL byte
736  * audit ID                4 bytes
737  * effective user ID       4 bytes
738  * effective group ID      4 bytes
739  * real user ID            4 bytes
740  * real group ID           4 bytes
741  * process ID              4 bytes
742  * session ID              4 bytes
744  *   port ID               4 bytes/8 bytes (32-bit/64-bit value)
745  *   machine address       4 bytes
770 	 * address type and 16 bytes of address, but for IPv4 addresses it  in au_to_process32()
803 	 * address type and 16 bytes of address, but for IPv4 addresses it  in au_to_process64()
823  * audit ID                4 bytes
824  * effective user ID       4 bytes
825  * effective group ID      4 bytes
826  * real user ID            4 bytes
827  * real group ID           4 bytes
828  * process ID              4 bytes
829  * session ID              4 bytes
831  *   port ID               4 bytes/8 bytes (32-bit/64-bit value)
832  *   address type-len      4 bytes
833  *   machine address      16 bytes
929  * return value            4 bytes/8 bytes (32-bit/64-bit value)
974  * sequence number         4 bytes
994  * socket domain           2 bytes
995  * socket type             2 bytes
997  * local port              2 bytes
998  * local address           4 bytes/16 bytes (IPv4/IPv6 address)
999  * remote port             2 bytes
1000  * remote address          4 bytes/16 bytes (IPv4/IPv6 address)
1053  * socket family           2 bytes
1054  * path                    (up to) 104 bytes + NULL  (NULL terminated string)
1067 	/* BSM token has two bytes for family */  in au_to_sock_unix()
1077  * socket family           2 bytes
1078  * local port              2 bytes
1079  * socket address          4 bytes
1147  * audit ID                4 bytes
1148  * effective user ID       4 bytes
1149  * effective group ID      4 bytes
1150  * real user ID            4 bytes
1151  * real group ID           4 bytes
1152  * process ID              4 bytes
1153  * session ID              4 bytes
1155  *   port ID               4 bytes/8 bytes (32-bit/64-bit value)
1156  *   machine address       4 bytes
1220  * audit ID                4 bytes
1221  * effective user ID       4 bytes
1222  * effective group ID      4 bytes
1223  * real user ID            4 bytes
1224  * real group ID           4 bytes
1225  * process ID              4 bytes
1226  * session ID              4 bytes
1228  *   port ID               4 bytes/8 bytes (32-bit/64-bit value)
1229  *   address type/length   4 bytes
1230  *   machine address      16 bytes
1354  * count				4 bytes
1394  * count				4 bytes
1434  * zonename length         2 bytes
1435  * zonename                N bytes + 1 terminating NULL byte
1457  * record byte count       4 bytes
1459  * event type              2 bytes
1460  * event modifier          2 bytes
1461  * seconds of time         4 bytes/8 bytes (32-bit/64-bit value)
1462  * milliseconds of time    4 bytes/8 bytes (32-bit/64-bit value)
1493  * record byte count       4 bytes
1495  * event type              2 bytes
1496  * event modifier          2 bytes
1497  * address type/length     4 bytes
1498  * machine address         4 bytes/16 bytes (IPv4/IPv6 address)
1499  * seconds of time         4 bytes/8 bytes (32-bit/64-bit value)
1500  * milliseconds of time    4 bytes/8 bytes (32-bit/64-bit value)
1625  * trailer magic number    2 bytes
1626  * record byte count       4 bytes