SSH_CONNECTION_ABANDON
{SSH_CONNECTION_ABANDON, "CONNECTION_ABANDON"},
audit_event(the_active_state, SSH_CONNECTION_ABANDON);