68  * privstrlen              2 bytes
69  * privstr                 N bytes + 1 (\0 byte)
91  * privtstrlen		2 bytes
92  * privtstr		N bytes + 1
93  * privstrlen		2 bytes
94  * privstr		N bytes + 1
119  * argument value          4 bytes/8 bytes (32-bit/64-bit value)
120  * text length             2 bytes
121  * text                    N bytes + 1 terminating NULL byte
177  * file access mode        4 bytes
178  * owner user ID           4 bytes
179  * owner group ID          4 bytes
180  * file system ID          4 bytes
181  * node ID                 8 bytes
182  * device                  4 bytes/8 bytes (32-bit/64-bit)
198 	 * BSD defines the size for the file mode as 2 bytes; BSM defines 4  in au_to_attr32()
245 	 * BSD defines the size for the file mode as 2 bytes; BSM defines 4  in au_to_attr64()
343  * status		   4 bytes
344  * return value            4 bytes
372  * number groups           2 bytes
373  * group list              count * 4 bytes
395  * internet address        4 bytes
413  * address type/length     4 bytes
414  * address                16 bytes
434  * ip header		   20 bytes
455  * object ID               4 bytes
474  * owner user ID           4 bytes
475  * owner group ID          4 bytes
476  * creator user ID         4 bytes
477  * creator group ID        4 bytes
478  * access mode             4 bytes
479  * slot sequence #         4 bytes
480  * key                     4 bytes
498 	 * Some systems define the sizes for ipc_perm members as 2 bytes;  in au_to_ipc_perm()
534  * port IP address         2 bytes
552  * size                    2 bytes
553  * data                    size bytes
556 au_to_opaque(const char *data, u_int16_t bytes)  in au_to_opaque()  argument
561 	GET_TOKEN_AREA(t, dptr, sizeof(u_char) + sizeof(u_int16_t) + bytes);  in au_to_opaque()
564 	ADD_U_INT16(dptr, bytes);  in au_to_opaque()
565 	ADD_MEM(dptr, data, bytes);  in au_to_opaque()
572  * seconds of time         4 bytes
573  * milliseconds of time    4 bytes
574  * file name len           2 bytes
575  * file pathname           N bytes + 1 terminating NULL byte
604  * text length             2 bytes
605  * text                    N bytes + 1 terminating NULL byte
630  * path length             2 bytes
631  * path                    N bytes + 1 terminating NULL byte
654  * audit ID                4 bytes
655  * effective user ID       4 bytes
656  * effective group ID      4 bytes
657  * real user ID            4 bytes
658  * real group ID           4 bytes
659  * process ID              4 bytes
660  * session ID              4 bytes
662  *   port ID               4 bytes/8 bytes (32-bit/64-bit value)
663  *   machine address       4 bytes
686 	 * address type and 16 bytes of address, but for IPv4 addresses it  in au_to_process32()
717 	 * address type and 16 bytes of address, but for IPv4 addresses it  in au_to_process64()
737  * audit ID                4 bytes
738  * effective user ID       4 bytes
739  * effective group ID      4 bytes
740  * real user ID            4 bytes
741  * real group ID           4 bytes
742  * process ID              4 bytes
743  * session ID              4 bytes
745  *   port ID               4 bytes/8 bytes (32-bit/64-bit value)
746  *   address type-len      4 bytes
747  *   machine address      16 bytes
852  * return value            4 bytes/8 bytes (32-bit/64-bit value)
893  * sequence number         4 bytes
911  * socket domain           2 bytes
912  * socket type             2 bytes
914  * local port              2 bytes
915  * local address           4 bytes/16 bytes (IPv4/IPv6 address)
916  * remote port             2 bytes
917  * remote address          4 bytes/16 bytes (IPv4/IPv6 address)
995  * socket family           2 bytes
996  * path                    (up to) 104 bytes + NULL  (NULL terminated string)
1007 	/* BSM token has two bytes for family */  in au_to_sock_unix()
1017  * socket family           2 bytes
1018  * local port              2 bytes
1019  * socket address          4 bytes
1083  * audit ID                4 bytes
1084  * effective user ID       4 bytes
1085  * effective group ID      4 bytes
1086  * real user ID            4 bytes
1087  * real group ID           4 bytes
1088  * process ID              4 bytes
1089  * session ID              4 bytes
1091  *   port ID               4 bytes/8 bytes (32-bit/64-bit value)
1092  *   machine address       4 bytes
1152  * audit ID                4 bytes
1153  * effective user ID       4 bytes
1154  * effective group ID      4 bytes
1155  * real user ID            4 bytes
1156  * real group ID           4 bytes
1157  * process ID              4 bytes
1158  * session ID              4 bytes
1160  *   port ID               4 bytes/8 bytes (32-bit/64-bit value)
1161  *   address type/length   4 bytes
1162  *   machine address      16 bytes
1305  * count				4 bytes
1317  * count				4 bytes
1329  * count				4 bytes
1367  * count				4 bytes
1406  * zonename length         2 bytes
1407  * zonename                N bytes + 1 terminating NULL byte
1427  * record byte count       4 bytes
1429  * event type              2 bytes
1430  * event modifier          2 bytes
1431  * seconds of time         4 bytes/8 bytes (32-bit/64-bit value)
1432  * milliseconds of time    4 bytes/8 bytes (32-bit/64-bit value)
1461  * record byte count       4 bytes
1463  * event type              2 bytes
1464  * event modifier          2 bytes
1465  * address type/length     4 bytes
1466  * machine address         4 bytes/16 bytes (IPv4/IPv6 address)
1467  * seconds of time         4 bytes/8 bytes (32-bit/64-bit value)
1468  * milliseconds of time    4 bytes/8 bytes (32-bit/64-bit value)
1590  * trailer magic number    2 bytes
1591  * record byte count       4 bytes