SMB_AUDIT_BUF_MAX_REC
abn->anb_max_index = SMB_AUDIT_BUF_MAX_REC - 1;
smb_audit_record_node_t anb_records[SMB_AUDIT_BUF_MAX_REC];