AUE_CONNECT

Connexion

Le journal de connexion est généré lorsqu’un processus demande à établir une connexion avec un système distant, ce qui se produit généralement lorsqu’un processus tente d’établir une connexion réseau avec un autre système, par exemple lorsqu’un client se connecte à un serveur.

Log Level (Niveau du journal)

2*

Requiert l’option Verbose (Détaillé)

Non

AUE_CONNECT Example

Exemple de journal de télémétrie pour une connexion.

{
  "arguments": {
    "fd": 25
  },
  "exec_chain": {
    "uuid": "B3719DFD-DDA4-4CA0-8E8B-B88684702CBA"
  },
  "exec_chain_child": {
    "parent_path": "/sbin/launchd",
    "parent_pid": 1,
    "parent_uuid": "4AB281FE-6D4A-4E79-8508-E91FCA39BA02"
  },
  "header": {
    "time_seconds_epoch": 1657906982,
    "time_milliseconds_offset": 582,
    "version": 11,
    "event_modifier": 0,
    "event_id": 32,
    "event_name": "AUE_CONNECT"
  },
  "host_info": {
    "serial_number": "C02WG0H4HDTS",
    "host_name": "Test MacBook Pro",
    "osversion": "Version 12.4 (Build 21F79)",
    "host_uuid": "8891C1E2-0AC0-4E4A-844B-EA491B14D115"
  },
  "identity": {
    "signer_id": "com.apple.configd",
    "team_id_truncated": false,
    "signer_id_truncated": false,
    "cd_hash": "78aacdd8703f168d712147687b82b84b2d995b76",
    "team_id": "",
    "signer_type": 1
  },
  "key": "DFBEF421-98CB-4847-BCE4-15360D5CA894",
  "path": [
    "//var/run/mDNSResponder"
  ],
  "return": {
    "error": 0,
    "description": "success",
    "return_value": 0
  },
  "socket_unix": {
    "path": "/var/run/mDNSResponder",
    "family": 1
  },
  "subject": {
    "session_id": 100000,
    "group_id": 0,
    "process_name": "/usr/libexec/configd",
    "parent_pid": 1,
    "effective_user_name": "root",
    "user_id": 0,
    "group_name": "wheel",
    "parent_uuid": "4AB281FE-6D4A-4E79-8508-E91FCA39BA02",
    "uuid": "B3719DFD-DDA4-4CA0-8E8B-B88684702CBA",
    "effective_group_id": 0,
    "process_hash": "fe70a0b737aa3c2e6975ee5ae9aabe33d9e85879",
    "audit_id": 4294967295,
    "responsible_process_id": 85,
    "parent_path": "/sbin/launchd",
    "process_id": 85,
    "effective_group_name": "wheel",
    "audit_user_name": "",
    "effective_user_id": 0,
    "terminal_id": {
      "type": 4,
      "ip_address": "0.0.0.0",
      "port": 0
    },
    "responsible_process_name": "/usr/libexec/configd",
    "user_name": "root"
  }
}