Hello, I am a newbie to Unix administration (specifically Solaris 9). I have everything setup properly for auditing but I neglected to realize I needed to start a new logfile each week. Thus the one logfile grew to about 2.5GB before the auditreduce command could no longer process the file.

Does anyone know of a way to split a raw binary audit file into two parts that are both useable? I attempted to use split but either because the second part did not have appropriate header information or, more likely, because the split was not exactly on a record boundry the second part is unuseable.

Please help!