A lot of daemons produce log entries like:

type=AVC msg=audit(1424425690.883:716630): apparmor="ALLOWED"
operation="file_mmap" info="Failed name lookup - disconnected path" error=-13
profile="/usr/sbin/httpd2-prefork//null-4172" name="var/run/nscd/passwd"
pid=25333 comm="id" requested_mask="r" denied_mask="r" fsuid=1002 ouid=0

but logprof is not able to parse this entry cause name="var/run/nscd/passwd" is
an invalid entry for it.

So either apparmor produces wrong entries in audid.log or the tool should be
able to handle it!