I have set the audit_trail='DB' in init parameter file. I have started the auditing by issueing 'audit session whenever successful' command, login as a sys user. Whenever I query the table aud$, I can see '\' as os_username and none other info available otherthan logoff(action# 101). These entries keeps on increasing in aud$ table. Where to find out this user?