There seems to be an issue with the audit.log(5) manpage, under the section "Expanded Header Token". It says: A 32-bit extended "header" token can be created using au_to_header32_ex(3); a 64-bit extended "header" token can be created using au_to_header64_ex(3).
- There are no man pages associated with the au_to_header32_ex and au_to_header64_ex.
- I was able to find the function au_to_header32_ex in the FreeBSD source. But there was no au_to_header64_ex in the source code.