A.1 January 2014 (OES 11 SP2)

Changes were made to the following sections. The changes are explained below.

A.1.1 VLOG Utility Man Page

Location	Change
[-l, --size] SIZE-IN-BYTES	Specify the maximum log file size in bytes. If the specified value is not a multiple of 4096 bytes (4 KB), it is automatically rounded up to the nearest 4-KB block. By default, the log file size is 262144 bytes (256 KB). The minimum log file size is 36864 bytes (36 KB). A SIZE-IN-BYTES value of zero [0] indicates no limit. The rollover to a new log file occurs based on space available for writes as you approach the maximum file size. Thus, the file sizes of log files might not exactly match the expected maximum size when you view their sizes in bytes. If you view their file sizes in kilobytes, all of the files will be the same size.
[-m, --maxFileCount] maxStreamFileCount	The default value for maxStreamFileCount changed from 50 files to 4096 files.
Negation Element Options	If one or more filter patterns are specified, place the include pattern before the exclude pattern, such as: DATA:/ProjectX/ () !DATA:/ProjectX//.tmp (*)
Event Element Options	IMPORTANT:NSS and NCP Server support hard links to files but not to directories. Hard links to files are supported only for paths within the same NSS volume. If you create a hard link, it is reported as a LINK event. Because of security considerations, NCP Server intentionally does not support soft links. If you create a soft link, it is reported as a CREATE event with a file attribute of 21-IS_LINK.
Event Types	Beginning in OES 11 SP2, a delete action for a file or folder on the NSS file system from an NCP client or CIFS client triggers four events: DELETE, OPEN, MODIFY, and CLOSE. In OES 11 SP1 and earlier, a delete action triggers only a DELETE event.

A.1.2 What’s New or Changed in the NSS Auditing Client Logger (VLOG) Utility

Location	Change
Section 2.2, What’s New (OES 11 SP2)	This section is new.