Guest User

log_remote, strace_remote

a guest
Dec 9th, 2015
284
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 139.10 KB | None | 0 0
  1. debug2: load_server_config: filename /etc/ssh/sshd_config
  2. debug2: load_server_config: done config len = 359
  3. debug2: parse_server_config: config /etc/ssh/sshd_config len 359
  4. debug3: /etc/ssh/sshd_config:15 setting AddressFamily inet
  5. debug3: /etc/ssh/sshd_config:18 setting ListenAddress 0.0.0.0
  6. debug3: /etc/ssh/sshd_config:56 setting AuthorizedKeysFile .ssh/authorized_keys
  7. debug3: /etc/ssh/sshd_config:78 setting ChallengeResponseAuthentication no
  8. debug3: /etc/ssh/sshd_config:99 setting UsePAM yes
  9. debug3: /etc/ssh/sshd_config:108 setting PrintMotd no
  10. debug3: /etc/ssh/sshd_config:112 setting UsePrivilegeSeparation sandbox
  11. debug3: /etc/ssh/sshd_config:128 setting Subsystem sftp /usr/lib/ssh/sftp-server
  12. debug3: /etc/ssh/sshd_config:137 setting LogLevel DEBUG3
  13. debug1: sshd version OpenSSH_7.1, OpenSSL 1.0.2e 3 Dec 2015
  14. debug1: private host key #0: ssh-rsa SHA256:d3NyuHOpBppO3i+Lz/GhXaGQlY/+YoFmpwTdXvjQD1g
  15. debug1: private host key #1: ssh-dss SHA256:lLiJWvftbT+BN+eL4Sq+9raSWPP7V8uyf269WsJi71Q
  16. debug1: private host key #2: ecdsa-sha2-nistp256 SHA256:OThXAs4tef5MQJIhtzTMXo7LhWUTdEl+U+x1CiGaoDY
  17. debug1: private host key #3: ssh-ed25519 SHA256:izJmtwW32HcmIIDzxwi+KbZn/XjU/2xww7KwHA2rCng
  18. debug1: rexec_argv[0]='/usr/bin/sshd'
  19. debug1: rexec_argv[1]='-ddd'
  20. debug1: rexec_argv[2]='-p'
  21. debug1: rexec_argv[3]='22'
  22. debug3: oom_adjust_setup
  23. debug1: Set /proc/self/oom_score_adj from 0 to -1000
  24. debug2: fd 3 setting O_NONBLOCK
  25. debug1: Bind to port 22 on 0.0.0.0.
  26. Server listening on 0.0.0.0 port 22.
  27. debug3: fd 4 is not O_NONBLOCK
  28. debug1: Server will not fork when running in debugging mode.
  29. debug3: send_rexec_state: entering fd = 7 config len 359
  30. debug3: ssh_msg_send: type 0
  31. debug3: send_rexec_state: done
  32. debug1: rexec start in 4 out 4 newsock 4 pipe -1 sock 7
  33. debug1: inetd sockets after dupping: 3, 3
  34. Connection from 37.59.6.187 port 52149 on 82.208.102.28 port 22
  35. debug1: Client protocol version 2.0; client software version OpenSSH_6.7p1 Debian-5
  36. debug1: match: OpenSSH_6.7p1 Debian-5 pat OpenSSH* compat 0x04000000
  37. debug1: Enabling compatibility mode for protocol 2.0
  38. debug1: Local version string SSH-2.0-OpenSSH_7.1
  39. debug2: fd 3 setting O_NONBLOCK
  40. debug3: ssh_sandbox_init: preparing seccomp filter sandbox
  41. debug2: Network child is on pid 385
  42. debug3: preauth child monitor started
  43. debug3: privsep user:group 99:99 [preauth]
  44. debug1: permanently_set_uid: 99/99 [preauth]
  45. debug3: ssh_sandbox_child: setting PR_SET_NO_NEW_PRIVS [preauth]
  46. debug3: ssh_sandbox_child: attaching seccomp filter program [preauth]
  47. debug3: list_hostkey_types: ssh-dss key not permitted by HostkeyAlgorithms [preauth]
  48. debug1: list_hostkey_types: ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  49. debug1: SSH2_MSG_KEXINIT sent [preauth]
  50. debug1: SSH2_MSG_KEXINIT received [preauth]
  51. debug2: kex_parse_kexinit: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1 [preauth]
  52. debug2: kex_parse_kexinit: ssh-rsa,ecdsa-sha2-nistp256,ssh-ed25519 [preauth]
  53. debug2: kex_parse_kexinit: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected] [preauth]
  54. debug2: kex_parse_kexinit: [email protected],aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected] [preauth]
  55. debug2: kex_parse_kexinit: none,[email protected] [preauth]
  56. debug2: kex_parse_kexinit: none,[email protected] [preauth]
  57. debug2: kex_parse_kexinit: [preauth]
  58. debug2: kex_parse_kexinit: [preauth]
  59. debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  60. debug2: kex_parse_kexinit: reserved 0 [preauth]
  61. debug2: kex_parse_kexinit: [email protected],ecdh-sha2-nistp256,ecdh-sha2-nistp384,ecdh-sha2-nistp521,diffie-hellman-group-exchange-sha256,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
  62. debug2: kex_parse_kexinit: [email protected],[email protected],[email protected],ecdsa-sha2-nistp256,ecdsa-sha2-nistp384,ecdsa-sha2-nistp521,[email protected],[email protected],[email protected],[email protected],[email protected],ssh-ed25519,ssh-rsa,ssh-dss [preauth]
  63. debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],[email protected],arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[email protected] [preauth]
  64. debug2: kex_parse_kexinit: aes128-ctr,aes192-ctr,aes256-ctr,[email protected],[email protected],[email protected],arcfour256,arcfour128,aes128-cbc,3des-cbc,blowfish-cbc,cast128-cbc,aes192-cbc,aes256-cbc,arcfour,[email protected] [preauth]
  65. debug2: kex_parse_kexinit: none,[email protected],zlib [preauth]
  66. debug2: kex_parse_kexinit: none,[email protected],zlib [preauth]
  67. debug2: kex_parse_kexinit: [preauth]
  68. debug2: kex_parse_kexinit: [preauth]
  69. debug2: kex_parse_kexinit: first_kex_follows 0 [preauth]
  70. debug2: kex_parse_kexinit: reserved 0 [preauth]
  71. debug1: kex: client->server aes128-ctr [email protected] none [preauth]
  72. debug1: kex: server->client aes128-ctr [email protected] none [preauth]
  73. debug1: expecting SSH2_MSG_KEX_ECDH_INIT [preauth]
  74. debug3: mm_key_sign entering [preauth]
  75. debug3: mm_request_send entering: type 6 [preauth]
  76. debug3: mm_key_sign: waiting for MONITOR_ANS_SIGN [preauth]
  77. debug3: mm_request_receive_expect entering: type 7 [preauth]
  78. debug3: mm_request_receive entering [preauth]
  79. debug3: mm_request_receive entering
  80. debug3: monitor_read: checking request 6
  81. debug3: mm_answer_sign
  82. debug3: mm_answer_sign: hostkey proof signature 0x56524d590120(99)
  83. debug3: mm_request_send entering: type 7
  84. debug2: monitor_read: 6 used once, disabling now
  85. debug2: set_newkeys: mode 1 [preauth]
  86. debug1: SSH2_MSG_NEWKEYS sent [preauth]
  87. debug1: expecting SSH2_MSG_NEWKEYS [preauth]
  88. debug2: set_newkeys: mode 0 [preauth]
  89. debug1: SSH2_MSG_NEWKEYS received [preauth]
  90. debug1: KEX done [preauth]
  91. debug1: userauth-request for user root service ssh-connection method none [preauth]
  92. debug1: attempt 0 failures 0 [preauth]
  93. debug3: mm_getpwnamallow entering [preauth]
  94. debug3: mm_request_send entering: type 8 [preauth]
  95. debug3: mm_getpwnamallow: waiting for MONITOR_ANS_PWNAM [preauth]
  96. debug3: mm_request_receive_expect entering: type 9 [preauth]
  97. debug3: mm_request_receive entering [preauth]
  98. debug3: mm_request_receive entering
  99. debug3: monitor_read: checking request 8
  100. debug3: mm_answer_pwnamallow
  101. debug2: parse_server_config: config reprocess config len 359
  102. debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1
  103. debug3: mm_request_send entering: type 9
  104. debug2: monitor_read: 8 used once, disabling now
  105. debug2: input_userauth_request: setting up authctxt for root [preauth]
  106. debug3: mm_start_pam entering [preauth]
  107. debug3: mm_request_send entering: type 100 [preauth]
  108. debug3: mm_inform_authserv entering [preauth]
  109. debug3: mm_request_send entering: type 4 [preauth]
  110. debug2: input_userauth_request: try method none [preauth]
  111. debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  112. debug3: mm_request_receive entering
  113. debug3: monitor_read: checking request 100
  114. debug1: PAM: initializing for "root"
  115. debug1: PAM: setting PAM_RHOST to "37.59.6.187"
  116. debug1: PAM: setting PAM_TTY to "ssh"
  117. debug2: monitor_read: 100 used once, disabling now
  118. debug3: mm_request_receive entering
  119. debug3: monitor_read: checking request 4
  120. debug3: mm_answer_authserv: service=ssh-connection, style=
  121. debug2: monitor_read: 4 used once, disabling now
  122. debug1: userauth-request for user root service ssh-connection method publickey [preauth]
  123. debug1: attempt 1 failures 0 [preauth]
  124. debug2: input_userauth_request: try method publickey [preauth]
  125. debug1: test whether pkalg/pkblob are acceptable [preauth]
  126. debug3: mm_key_allowed entering [preauth]
  127. debug3: mm_request_send entering: type 22 [preauth]
  128. debug3: mm_key_allowed: waiting for MONITOR_ANS_KEYALLOWED [preauth]
  129. debug3: mm_request_receive_expect entering: type 23 [preauth]
  130. debug3: mm_request_receive entering [preauth]
  131. debug3: mm_request_receive entering
  132. debug3: monitor_read: checking request 22
  133. debug3: mm_answer_keyallowed entering
  134. debug3: mm_answer_keyallowed: key_from_blob: 0x56524d590010
  135. debug1: temporarily_use_uid: 0/0 (e=0/0)
  136. debug1: trying public key file /root/.ssh/authorized_keys
  137. debug1: Could not open authorized keys '/root/.ssh/authorized_keys': No such file or directory
  138. debug1: restore_uid: 0/0
  139. Failed publickey for root from 37.59.6.187 port 52149 ssh2: RSA SHA256:WLMg8WJa8GFf9kkb42YZq5Gu3g2E6zMA8Vr4aQXWVlY
  140. debug3: mm_answer_keyallowed: key 0x56524d590010 is not allowed
  141. debug3: mm_request_send entering: type 23
  142. debug2: userauth_pubkey: authenticated 0 pkalg ssh-rsa [preauth]
  143. debug3: userauth_finish: failure partial=0 next methods="publickey,password" [preauth]
  144. Connection closed by 37.59.6.187 [preauth]
  145. debug1: do_cleanup [preauth]
  146. debug3: PAM: sshpam_thread_cleanup entering [preauth]
  147. debug1: monitor_read_log: child log fd closed
  148. debug3: mm_request_receive entering
  149. debug1: do_cleanup
  150. debug1: PAM: cleanup
  151. debug3: PAM: sshpam_thread_cleanup entering
  152. debug1: Killing privsep child 385
  153.  
  154. 229 select(7, [3], NULL, NULL, NULL) = 1 (in [3])
  155. 229 accept(3, {sa_family=AF_INET, sin_port=htons(52105), sin_addr=inet_addr("37.59.6.187")}, [16]) = 4
  156. 229 fcntl(4, F_GETFL) = 0x2 (flags O_RDWR)
  157. 229 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 5
  158. 229 connect(5, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  159. 229 sendto(5, "<39>Nov 28 18:31:24 sshd[229]: d"..., 61, MSG_NOSIGNAL, NULL, 0) = 61
  160. 229 close(5) = 0
  161. 229 pipe([5, 6]) = 0
  162. 229 socketpair(PF_LOCAL, SOCK_STREAM, 0, [7, 8]) = 0
  163. 229 clone( <unfinished ...>
  164. 368 set_robust_list(0x7fc45ef16a20, 24 <unfinished ...>
  165. 229 <... clone resumed> child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fc45ef16a10) = 368
  166. 368 <... set_robust_list resumed> ) = 0
  167. 229 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  168. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  169. 229 <... socket resumed> ) = 9
  170. 368 <... socket resumed> ) = 9
  171. 229 connect(9, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  172. 368 connect(9, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  173. 229 <... connect resumed> ) = 0
  174. 368 <... connect resumed> ) = 0
  175. 229 sendto(9, "<39>Nov 28 18:31:24 sshd[229]: d"..., 56, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  176. 368 sendto(9, "<39>Nov 28 18:31:24 sshd[368]: d"..., 57, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  177. 229 <... sendto resumed> ) = 56
  178. 368 <... sendto resumed> ) = 57
  179. 229 close(9 <unfinished ...>
  180. 368 close(9 <unfinished ...>
  181. 229 <... close resumed> ) = 0
  182. 368 <... close resumed> ) = 0
  183. 229 close(6 <unfinished ...>
  184. 368 open("/proc/self/oom_score_adj", O_WRONLY|O_CREAT|O_TRUNC, 0666 <unfinished ...>
  185. 229 <... close resumed> ) = 0
  186. 368 <... open resumed> ) = 9
  187. 229 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  188. 368 fstat(9, <unfinished ...>
  189. 229 <... socket resumed> ) = 6
  190. 368 <... fstat resumed> {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
  191. 229 connect(6, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  192. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
  193. 229 <... connect resumed> ) = 0
  194. 368 <... mmap resumed> ) = 0x7fc45ef26000
  195. 229 sendto(6, "<39>Nov 28 18:31:24 sshd[229]: d"..., 87, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  196. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  197. 229 <... sendto resumed> ) = 87
  198. 368 <... socket resumed> ) = 10
  199. 229 close(6 <unfinished ...>
  200. 368 connect(10, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  201. 229 <... close resumed> ) = 0
  202. 368 <... connect resumed> ) = 0
  203. 229 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  204. 368 sendto(10, "<39>Nov 28 18:31:24 sshd[368]: d"..., 72, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  205. 229 <... socket resumed> ) = 6
  206. 368 <... sendto resumed> ) = 72
  207. 229 connect(6, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  208. 368 close(10 <unfinished ...>
  209. 229 <... connect resumed> ) = 0
  210. 368 <... close resumed> ) = 0
  211. 229 sendto(6, "<39>Nov 28 18:31:24 sshd[229]: d"..., 59, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  212. 368 write(9, "0\n", 2 <unfinished ...>
  213. 229 <... sendto resumed> ) = 59
  214. 368 <... write resumed> ) = 2
  215. 229 close(6 <unfinished ...>
  216. 368 close(9 <unfinished ...>
  217. 229 <... close resumed> ) = 0
  218. 368 <... close resumed> ) = 0
  219. 229 write(7, "\0\0\1o\0", 5 <unfinished ...>
  220. 368 munmap(0x7fc45ef26000, 4096 <unfinished ...>
  221. 229 <... write resumed> ) = 5
  222. 368 <... munmap resumed> ) = 0
  223. 229 write(7, "\0\0\1f\n\n\n\n\n\n\n\n\n\n\n\n\n\nAddressFamily "..., 366 <unfinished ...>
  224. 368 close(5 <unfinished ...>
  225. 229 <... write resumed> ) = 366
  226. 368 <... close resumed> ) = 0
  227. 229 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  228. 368 close(3 <unfinished ...>
  229. 229 <... socket resumed> ) = 6
  230. 368 <... close resumed> ) = 0
  231. 229 connect(6, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  232. 368 close(7 <unfinished ...>
  233. 229 <... connect resumed> ) = 0
  234. 368 <... close resumed> ) = 0
  235. 229 sendto(6, "<39>Nov 28 18:31:24 sshd[229]: d"..., 61, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  236. 368 setsid( <unfinished ...>
  237. 229 <... sendto resumed> ) = 61
  238. 368 <... setsid resumed> ) = 368
  239. 229 close(6 <unfinished ...>
  240. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  241. 229 <... close resumed> ) = 0
  242. 368 <... socket resumed> ) = 3
  243. 229 close(7 <unfinished ...>
  244. 368 connect(3, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  245. 229 <... close resumed> ) = 0
  246. 368 <... connect resumed> ) = 0
  247. 229 close(8 <unfinished ...>
  248. 368 sendto(3, "<39>Nov 28 18:31:24 sshd[368]: d"..., 85, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  249. 229 <... close resumed> ) = 0
  250. 368 <... sendto resumed> ) = 85
  251. 229 close(4 <unfinished ...>
  252. 368 close(3 <unfinished ...>
  253. 229 <... close resumed> ) = 0
  254. 368 <... close resumed> ) = 0
  255. 229 select(7, [3 5], NULL, NULL, NULL <unfinished ...>
  256. 368 dup2(4, 0) = 0
  257. 368 dup2(0, 1) = 1
  258. 368 dup2(6, 4) = 4
  259. 368 close(6) = 0
  260. 368 dup2(8, 5) = 5
  261. 368 close(8) = 0
  262. 368 execve("/usr/bin/sshd", ["/usr/bin/sshd", "-D", "-R"], [/* 2 vars */]) = 0
  263. 368 brk(0) = 0x562697f94000
  264. 368 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  265. 368 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  266. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=26499, ...}) = 0
  267. 368 mmap(NULL, 26499, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f453da89000
  268. 368 close(3) = 0
  269. 368 open("/usr/lib/libpam.so.0", O_RDONLY|O_CLOEXEC) = 3
  270. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@'\0\0\0\0\0\0"..., 832) = 832
  271. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=60008, ...}) = 0
  272. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da88000
  273. 368 mmap(NULL, 2155104, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453d660000
  274. 368 mprotect(0x7f453d66d000, 2097152, PROT_NONE) = 0
  275. 368 mmap(0x7f453d86d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd000) = 0x7f453d86d000
  276. 368 close(3) = 0
  277. 368 open("/usr/lib/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
  278. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0z\6\0\0\0\0\0"..., 832) = 832
  279. 368 fstat(3, {st_mode=S_IFREG|0555, st_size=2859464, ...}) = 0
  280. 368 mmap(NULL, 4684928, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453d1e8000
  281. 368 mprotect(0x7f453d436000, 2093056, PROT_NONE) = 0
  282. 368 mmap(0x7f453d635000, 163840, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x24d000) = 0x7f453d635000
  283. 368 mmap(0x7f453d65d000, 11392, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453d65d000
  284. 368 close(3) = 0
  285. 368 open("/usr/lib/libutil.so.1", O_RDONLY|O_CLOEXEC) = 3
  286. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\16\0\0\0\0\0\0"..., 832) = 832
  287. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=10592, ...}) = 0
  288. 368 mmap(NULL, 2105624, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453cfe5000
  289. 368 mprotect(0x7f453cfe7000, 2093056, PROT_NONE) = 0
  290. 368 mmap(0x7f453d1e6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7f453d1e6000
  291. 368 close(3) = 0
  292. 368 open("/usr/lib/libz.so.1", O_RDONLY|O_CLOEXEC) = 3
  293. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20#\0\0\0\0\0\0"..., 832) = 832
  294. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=88592, ...}) = 0
  295. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da87000
  296. 368 mmap(NULL, 2183688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453cdcf000
  297. 368 mprotect(0x7f453cde4000, 2093056, PROT_NONE) = 0
  298. 368 mmap(0x7f453cfe3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x7f453cfe3000
  299. 368 close(3) = 0
  300. 368 open("/usr/lib/libcrypt.so.1", O_RDONLY|O_CLOEXEC) = 3
  301. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\v\0\0\0\0\0\0"..., 832) = 832
  302. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=39168, ...}) = 0
  303. 368 mmap(NULL, 2322944, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453cb97000
  304. 368 mprotect(0x7f453cb9f000, 2097152, PROT_NONE) = 0
  305. 368 mmap(0x7f453cd9f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f453cd9f000
  306. 368 mmap(0x7f453cda1000, 184832, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453cda1000
  307. 368 close(3) = 0
  308. 368 open("/usr/lib/libgssapi_krb5.so.2", O_RDONLY|O_CLOEXEC) = 3
  309. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 \303\0\0\0\0\0\0"..., 832) = 832
  310. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=313608, ...}) = 0
  311. 368 mmap(NULL, 2409280, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453c94a000
  312. 368 mprotect(0x7f453c994000, 2093056, PROT_NONE) = 0
  313. 368 mmap(0x7f453cb93000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x49000) = 0x7f453cb93000
  314. 368 close(3) = 0
  315. 368 open("/usr/lib/libkrb5.so.3", O_RDONLY|O_CLOEXEC) = 3
  316. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\220P\2\0\0\0\0\0"..., 832) = 832
  317. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=937208, ...}) = 0
  318. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da86000
  319. 368 mmap(NULL, 3033088, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453c665000
  320. 368 mprotect(0x7f453c73a000, 2097152, PROT_NONE) = 0
  321. 368 mmap(0x7f453c93a000, 65536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xd5000) = 0x7f453c93a000
  322. 368 close(3) = 0
  323. 368 open("/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
  324. 368 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0000\7\2\0\0\0\0\0"..., 832) = 832
  325. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=1991416, ...}) = 0
  326. 368 mmap(NULL, 3815984, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453c2c1000
  327. 368 mprotect(0x7f453c45c000, 2093056, PROT_NONE) = 0
  328. 368 mmap(0x7f453c65b000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x19a000) = 0x7f453c65b000
  329. 368 mmap(0x7f453c661000, 14896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453c661000
  330. 368 close(3) = 0
  331. 368 open("/usr/lib/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
  332. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\16\0\0\0\0\0\0"..., 832) = 832
  333. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=14576, ...}) = 0
  334. 368 mmap(NULL, 2109712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453c0bd000
  335. 368 mprotect(0x7f453c0c0000, 2093056, PROT_NONE) = 0
  336. 368 mmap(0x7f453c2bf000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f453c2bf000
  337. 368 close(3) = 0
  338. 368 open("/usr/lib/libk5crypto.so.3", O_RDONLY|O_CLOEXEC) = 3
  339. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320H\0\0\0\0\0\0"..., 832) = 832
  340. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=195384, ...}) = 0
  341. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da85000
  342. 368 mmap(NULL, 2294296, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453be8c000
  343. 368 mprotect(0x7f453beba000, 2093056, PROT_NONE) = 0
  344. 368 mmap(0x7f453c0b9000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2d000) = 0x7f453c0b9000
  345. 368 mmap(0x7f453c0bc000, 536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453c0bc000
  346. 368 close(3) = 0
  347. 368 open("/usr/lib/libcom_err.so.2", O_RDONLY|O_CLOEXEC) = 3
  348. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\25\0\0\0\0\0\0"..., 832) = 832
  349. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=14632, ...}) = 0
  350. 368 mmap(NULL, 2109960, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453bc88000
  351. 368 mprotect(0x7f453bc8b000, 2093056, PROT_NONE) = 0
  352. 368 mmap(0x7f453be8a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f453be8a000
  353. 368 close(3) = 0
  354. 368 open("/usr/lib/libkrb5support.so.0", O_RDONLY|O_CLOEXEC) = 3
  355. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P0\0\0\0\0\0\0"..., 832) = 832
  356. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=52184, ...}) = 0
  357. 368 mmap(NULL, 2147688, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453ba7b000
  358. 368 mprotect(0x7f453ba87000, 2093056, PROT_NONE) = 0
  359. 368 mmap(0x7f453bc86000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f453bc86000
  360. 368 close(3) = 0
  361. 368 open("/usr/lib/libkeyutils.so.1", O_RDONLY|O_CLOEXEC) = 3
  362. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\25\0\0\0\0\0\0"..., 832) = 832
  363. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=14568, ...}) = 0
  364. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da84000
  365. 368 mmap(NULL, 2109720, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453b877000
  366. 368 mprotect(0x7f453b87a000, 2093056, PROT_NONE) = 0
  367. 368 mmap(0x7f453ba79000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7f453ba79000
  368. 368 close(3) = 0
  369. 368 open("/usr/lib/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
  370. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3209\0\0\0\0\0\0"..., 832) = 832
  371. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=84768, ...}) = 0
  372. 368 mmap(NULL, 2189928, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453b660000
  373. 368 mprotect(0x7f453b674000, 2093056, PROT_NONE) = 0
  374. 368 mmap(0x7f453b873000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13000) = 0x7f453b873000
  375. 368 mmap(0x7f453b875000, 6760, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453b875000
  376. 368 close(3) = 0
  377. 368 open("/usr/lib/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
  378. 368 read(3, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@a\0\0\0\0\0\0"..., 832) = 832
  379. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=146608, ...}) = 0
  380. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da83000
  381. 368 mmap(NULL, 2213008, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453b443000
  382. 368 mprotect(0x7f453b45b000, 2093056, PROT_NONE) = 0
  383. 368 mmap(0x7f453b65a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7f453b65a000
  384. 368 mmap(0x7f453b65c000, 13456, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453b65c000
  385. 368 close(3) = 0
  386. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da82000
  387. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da81000
  388. 368 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da7f000
  389. 368 arch_prctl(ARCH_SET_FS, 0x7f453da7f740) = 0
  390. 368 mprotect(0x7f453c65b000, 16384, PROT_READ) = 0
  391. 368 mprotect(0x7f453b65a000, 4096, PROT_READ) = 0
  392. 368 mprotect(0x7f453b873000, 4096, PROT_READ) = 0
  393. 368 mprotect(0x7f453ba79000, 4096, PROT_READ) = 0
  394. 368 mprotect(0x7f453c2bf000, 4096, PROT_READ) = 0
  395. 368 mprotect(0x7f453bc86000, 4096, PROT_READ) = 0
  396. 368 mprotect(0x7f453be8a000, 4096, PROT_READ) = 0
  397. 368 mprotect(0x7f453c0b9000, 8192, PROT_READ) = 0
  398. 368 mprotect(0x7f453c93a000, 53248, PROT_READ) = 0
  399. 368 mprotect(0x7f453cb93000, 8192, PROT_READ) = 0
  400. 368 mprotect(0x7f453cd9f000, 4096, PROT_READ) = 0
  401. 368 mprotect(0x7f453cfe3000, 4096, PROT_READ) = 0
  402. 368 mprotect(0x7f453d1e6000, 4096, PROT_READ) = 0
  403. 368 mprotect(0x7f453d635000, 114688, PROT_READ) = 0
  404. 368 mprotect(0x7f453d86d000, 4096, PROT_READ) = 0
  405. 368 mprotect(0x56269785d000, 12288, PROT_READ) = 0
  406. 368 mprotect(0x7f453da90000, 4096, PROT_READ) = 0
  407. 368 munmap(0x7f453da89000, 26499) = 0
  408. 368 set_tid_address(0x7f453da7fa10) = 368
  409. 368 set_robust_list(0x7f453da7fa20, 24) = 0
  410. 368 rt_sigaction(SIGRTMIN, {0x7f453b448be0, [], SA_RESTORER|SA_SIGINFO, 0x7f453b453d60}, NULL, 8) = 0
  411. 368 rt_sigaction(SIGRT_1, {0x7f453b448c70, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7f453b453d60}, NULL, 8) = 0
  412. 368 rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
  413. 368 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0
  414. 368 brk(0) = 0x562697f94000
  415. 368 brk(0x562697fb5000) = 0x562697fb5000
  416. 368 geteuid() = 0
  417. 368 setgroups(0, []) = 0
  418. 368 open("/dev/null", O_RDWR) = 3
  419. 368 close(3) = 0
  420. 368 stat("/proc/368/fd", {st_mode=S_IFDIR|0500, st_size=0, ...}) = 0
  421. 368 open("/proc/368/fd", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 3
  422. 368 fstat(3, {st_mode=S_IFDIR|0500, st_size=0, ...}) = 0
  423. 368 getdents(3, /* 8 entries */, 32768) = 192
  424. 368 getdents(3, /* 0 entries */, 32768) = 0
  425. 368 close(3) = 0
  426. 368 open("/etc/ssl/openssl.cnf", O_RDONLY) = 3
  427. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=10835, ...}) = 0
  428. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  429. 368 read(3, "#\n# OpenSSL example configuratio"..., 4096) = 4096
  430. 368 read(3, "Netscape crash on BMPStrings or "..., 4096) = 4096
  431. 368 read(3, " this to avoid interpreting an e"..., 4096) = 2643
  432. 368 read(3, "", 4096) = 0
  433. 368 close(3) = 0
  434. 368 munmap(0x7f453da8f000, 4096) = 0
  435. 368 read(5, "\0\0\1o", 4) = 4
  436. 368 read(5, "\0\0\0\1f\n\n\n\n\n\n\n\n\n\n\n\n\n\nAddressFamily"..., 367) = 367
  437. 368 getuid() = 0
  438. 368 open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = 3
  439. 368 fstat(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0
  440. 368 poll([{fd=3, events=POLLIN}], 1, 10) = 1 ([{fd=3, revents=POLLIN}])
  441. 368 read(3, "X/\242\0304!E\321\272\6s\26o\307\354NO`\2L:)\225)\0067 ]u\335'`", 32) = 32
  442. 368 close(3) = 0
  443. 368 getuid() = 0
  444. 368 socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
  445. 368 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  446. 368 close(3) = 0
  447. 368 socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
  448. 368 connect(3, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  449. 368 close(3) = 0
  450. 368 open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3
  451. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
  452. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  453. 368 read(3, "# Begin /etc/nsswitch.conf\n\npass"..., 4096) = 234
  454. 368 read(3, "", 4096) = 0
  455. 368 close(3) = 0
  456. 368 munmap(0x7f453da8f000, 4096) = 0
  457. 368 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
  458. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=26499, ...}) = 0
  459. 368 mmap(NULL, 26499, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f453da89000
  460. 368 close(3) = 0
  461. 368 open("/usr/lib/libnss_files.so.2", O_RDONLY|O_CLOEXEC) = 3
  462. 368 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 \"\0\0\0\0\0\0"..., 832) = 832
  463. 368 fstat(3, {st_mode=S_IFREG|0755, st_size=47544, ...}) = 0
  464. 368 mmap(NULL, 2168632, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f453b231000
  465. 368 mprotect(0x7f453b23c000, 2093056, PROT_NONE) = 0
  466. 368 mmap(0x7f453b43b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0x7f453b43b000
  467. 368 mmap(0x7f453b43d000, 22328, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453b43d000
  468. 368 close(3) = 0
  469. 368 mprotect(0x7f453b43b000, 4096, PROT_READ) = 0
  470. 368 munmap(0x7f453da89000, 26499) = 0
  471. 368 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
  472. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=920, ...}) = 0
  473. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  474. 368 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 920
  475. 368 close(3) = 0
  476. 368 munmap(0x7f453da8f000, 4096) = 0
  477. 368 open("/etc/ssh/ssh_host_rsa_key", O_RDONLY) = 3
  478. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=1679, ...}) = 0
  479. 368 getuid() = 0
  480. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=1679, ...}) = 0
  481. 368 read(3, "-----BEGIN RSA PRIVATE KEY-----\n"..., 1024) = 1024
  482. 368 read(3, "PxdU+XNJ/5KEEHNTaZL7UHG/it8jdHk1"..., 1024) = 655
  483. 368 read(3, "", 369) = 0
  484. 368 read(3, "", 1024) = 0
  485. 368 close(3) = 0
  486. 368 open("/etc/ssh/ssh_host_rsa_key", O_RDONLY) = 3
  487. 368 close(3) = 0
  488. 368 open("/etc/ssh/ssh_host_rsa_key", O_RDONLY) = 3
  489. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=1679, ...}) = 0
  490. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  491. 368 read(3, "-----BEGIN RSA PRIVATE KEY-----\n"..., 4096) = 1679
  492. 368 close(3) = 0
  493. 368 munmap(0x7f453da8f000, 4096) = 0
  494. 368 open("/etc/ssh/ssh_host_rsa_key.pub", O_RDONLY) = 3
  495. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=394, ...}) = 0
  496. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  497. 368 read(3, "ssh-rsa AAAAB3NzaC1yc2EAAAADAQAB"..., 4096) = 394
  498. 368 close(3) = 0
  499. 368 munmap(0x7f453da8f000, 4096) = 0
  500. 368 open("/etc/ssh/ssh_host_dsa_key", O_RDONLY) = 3
  501. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=672, ...}) = 0
  502. 368 getuid() = 0
  503. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=672, ...}) = 0
  504. 368 read(3, "-----BEGIN DSA PRIVATE KEY-----\n"..., 1024) = 672
  505. 368 read(3, "", 352) = 0
  506. 368 read(3, "", 1024) = 0
  507. 368 close(3) = 0
  508. 368 open("/etc/ssh/ssh_host_dsa_key", O_RDONLY) = 3
  509. 368 close(3) = 0
  510. 368 open("/etc/ssh/ssh_host_dsa_key", O_RDONLY) = 3
  511. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=672, ...}) = 0
  512. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  513. 368 read(3, "-----BEGIN DSA PRIVATE KEY-----\n"..., 4096) = 672
  514. 368 close(3) = 0
  515. 368 munmap(0x7f453da8f000, 4096) = 0
  516. 368 open("/etc/ssh/ssh_host_dsa_key.pub", O_RDONLY) = 3
  517. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=602, ...}) = 0
  518. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  519. 368 read(3, "ssh-dss AAAAB3NzaC1kc3MAAACBAMdd"..., 4096) = 602
  520. 368 close(3) = 0
  521. 368 munmap(0x7f453da8f000, 4096) = 0
  522. 368 open("/etc/ssh/ssh_host_ecdsa_key", O_RDONLY) = 3
  523. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=227, ...}) = 0
  524. 368 getuid() = 0
  525. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=227, ...}) = 0
  526. 368 read(3, "-----BEGIN EC PRIVATE KEY-----\nM"..., 1024) = 227
  527. 368 read(3, "", 797) = 0
  528. 368 read(3, "", 1024) = 0
  529. 368 close(3) = 0
  530. 368 open("/etc/ssh/ssh_host_ecdsa_key", O_RDONLY) = 3
  531. 368 close(3) = 0
  532. 368 open("/etc/ssh/ssh_host_ecdsa_key", O_RDONLY) = 3
  533. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=227, ...}) = 0
  534. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  535. 368 read(3, "-----BEGIN EC PRIVATE KEY-----\nM"..., 4096) = 227
  536. 368 close(3) = 0
  537. 368 munmap(0x7f453da8f000, 4096) = 0
  538. 368 open("/etc/ssh/ssh_host_ecdsa_key.pub", O_RDONLY) = 3
  539. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=174, ...}) = 0
  540. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  541. 368 read(3, "ecdsa-sha2-nistp256 AAAAE2VjZHNh"..., 4096) = 174
  542. 368 close(3) = 0
  543. 368 munmap(0x7f453da8f000, 4096) = 0
  544. 368 open("/etc/ssh/ssh_host_ed25519_key", O_RDONLY) = 3
  545. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=399, ...}) = 0
  546. 368 getuid() = 0
  547. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=399, ...}) = 0
  548. 368 read(3, "-----BEGIN OPENSSH PRIVATE KEY--"..., 1024) = 399
  549. 368 read(3, "", 625) = 0
  550. 368 read(3, "", 1024) = 0
  551. 368 close(3) = 0
  552. 368 open("/etc/ssh/ssh_host_ed25519_key", O_RDONLY) = 3
  553. 368 close(3) = 0
  554. 368 open("/etc/ssh/ssh_host_ed25519_key", O_RDONLY) = 3
  555. 368 fstat(3, {st_mode=S_IFREG|0600, st_size=399, ...}) = 0
  556. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  557. 368 read(3, "-----BEGIN OPENSSH PRIVATE KEY--"..., 4096) = 399
  558. 368 close(3) = 0
  559. 368 munmap(0x7f453da8f000, 4096) = 0
  560. 368 open("/etc/ssh/ssh_host_ed25519_key.pub", O_RDONLY) = 3
  561. 368 fstat(3, {st_mode=S_IFREG|0644, st_size=94, ...}) = 0
  562. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  563. 368 read(3, "ssh-ed25519 AAAAC3NzaC1lZDI1NTE5"..., 4096) = 94
  564. 368 close(3) = 0
  565. 368 munmap(0x7f453da8f000, 4096) = 0
  566. 368 stat("/var/empty", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  567. 368 setgroups(0, []) = 0
  568. 368 umask(077) = 022
  569. 368 umask(022) = 077
  570. 368 chdir("/") = 0
  571. 368 rt_sigaction(SIGPIPE, NULL, {SIG_IGN, [], 0}, 8) = 0
  572. 368 close(5) = 0
  573. 368 dup(0) = 3
  574. 368 dup(4) = 5
  575. 368 close(4) = 0
  576. 368 open("/dev/null", O_RDWR) = 4
  577. 368 dup2(4, 0) = 0
  578. 368 dup2(4, 1) = 1
  579. 368 dup2(4, 2) = 2
  580. 368 close(4) = 0
  581. 368 open("/etc/localtime", O_RDONLY|O_CLOEXEC) = 4
  582. 368 fstat(4, {st_mode=S_IFREG|0644, st_size=1528, ...}) = 0
  583. 368 fstat(4, {st_mode=S_IFREG|0644, st_size=1528, ...}) = 0
  584. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  585. 368 read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\20\0\0\0\0"..., 4096) = 1528
  586. 368 lseek(4, -928, SEEK_CUR) = 600
  587. 368 read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\20\0\0\0\20\0\0\0\0"..., 4096) = 928
  588. 368 close(4) = 0
  589. 368 munmap(0x7f453da8f000, 4096) = 0
  590. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  591. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  592. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 72, MSG_NOSIGNAL, NULL, 0) = 72
  593. 368 close(4) = 0
  594. 368 fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  595. 368 fcntl(3, F_SETFD, FD_CLOEXEC) = 0
  596. 368 alarm(0) = 0
  597. 368 rt_sigaction(SIGALRM, NULL, {SIG_DFL, [], 0}, 8) = 0
  598. 368 rt_sigaction(SIGHUP, NULL, {SIG_DFL, [], 0}, 8) = 0
  599. 368 rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
  600. 368 rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
  601. 368 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0
  602. 368 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
  603. 368 getpeername(3, {sa_family=AF_INET, sin_port=htons(52105), sin_addr=inet_addr("37.59.6.187")}, [16]) = 0
  604. 368 setsockopt(3, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0
  605. 368 getpeername(3, {sa_family=AF_INET, sin_port=htons(52105), sin_addr=inet_addr("37.59.6.187")}, [16]) = 0
  606. 368 getpeername(3, {sa_family=AF_INET, sin_port=htons(52105), sin_addr=inet_addr("37.59.6.187")}, [16]) = 0
  607. 368 open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 4
  608. 368 fstat(4, {st_mode=S_IFREG|0644, st_size=3145, ...}) = 0
  609. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  610. 368 read(4, "# Full data: /usr/share/iana-etc"..., 4096) = 3145
  611. 368 read(4, "", 4096) = 0
  612. 368 close(4) = 0
  613. 368 munmap(0x7f453da8f000, 4096) = 0
  614. 368 getsockopt(3, SOL_IP, IP_OPTIONS, "", [0]) = 0
  615. 368 getpeername(3, {sa_family=AF_INET, sin_port=htons(52105), sin_addr=inet_addr("37.59.6.187")}, [16]) = 0
  616. 368 getsockname(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("82.208.102.28")}, [16]) = 0
  617. 368 getsockname(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("82.208.102.28")}, [16]) = 0
  618. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  619. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  620. 368 sendto(4, "<38>Nov 28 18:31:24 sshd[368]: C"..., 94, MSG_NOSIGNAL, NULL, 0) = 94
  621. 368 close(4) = 0
  622. 368 rt_sigaction(SIGALRM, NULL, {SIG_DFL, [], 0}, 8) = 0
  623. 368 rt_sigaction(SIGALRM, {0x5626975b23e0, [], SA_RESTORER|SA_INTERRUPT, 0x7f453c2f4680}, NULL, 8) = 0
  624. 368 alarm(120) = 0
  625. 368 write(3, "SSH-2.0-OpenSSH_7.1\r\n", 21) = 21
  626. 368 read(3, "S", 1) = 1
  627. 368 read(3, "S", 1) = 1
  628. 368 read(3, "H", 1) = 1
  629. 368 read(3, "-", 1) = 1
  630. 368 read(3, "2", 1) = 1
  631. 368 read(3, ".", 1) = 1
  632. 368 read(3, "0", 1) = 1
  633. 368 read(3, "-", 1) = 1
  634. 368 read(3, "O", 1) = 1
  635. 368 read(3, "p", 1) = 1
  636. 368 read(3, "e", 1) = 1
  637. 368 read(3, "n", 1) = 1
  638. 368 read(3, "S", 1) = 1
  639. 368 read(3, "S", 1) = 1
  640. 368 read(3, "H", 1) = 1
  641. 368 read(3, "_", 1) = 1
  642. 368 read(3, "6", 1) = 1
  643. 368 read(3, ".", 1) = 1
  644. 368 read(3, "7", 1) = 1
  645. 368 read(3, "p", 1) = 1
  646. 368 read(3, "1", 1) = 1
  647. 368 read(3, " ", 1) = 1
  648. 368 read(3, "D", 1) = 1
  649. 368 read(3, "e", 1) = 1
  650. 368 read(3, "b", 1) = 1
  651. 368 read(3, "i", 1) = 1
  652. 368 read(3, "a", 1) = 1
  653. 368 read(3, "n", 1) = 1
  654. 368 read(3, "-", 1) = 1
  655. 368 read(3, "5", 1) = 1
  656. 368 read(3, "\r", 1) = 1
  657. 368 read(3, "\n", 1) = 1
  658. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  659. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  660. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 114, MSG_NOSIGNAL, NULL, 0) = 114
  661. 368 close(4) = 0
  662. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  663. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  664. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 99, MSG_NOSIGNAL, NULL, 0) = 99
  665. 368 close(4) = 0
  666. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  667. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  668. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 83, MSG_NOSIGNAL, NULL, 0) = 83
  669. 368 close(4) = 0
  670. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  671. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  672. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 79, MSG_NOSIGNAL, NULL, 0) = 79
  673. 368 close(4) = 0
  674. 368 fcntl(3, F_GETFL) = 0x2 (flags O_RDWR)
  675. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  676. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  677. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 62, MSG_NOSIGNAL, NULL, 0) = 62
  678. 368 close(4) = 0
  679. 368 fcntl(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0
  680. 368 socketpair(PF_LOCAL, SOCK_STREAM, 0, [4, 6]) = 0
  681. 368 fcntl(4, F_SETFD, FD_CLOEXEC) = 0
  682. 368 fcntl(6, F_SETFD, FD_CLOEXEC) = 0
  683. 368 pipe([7, 8]) = 0
  684. 368 fcntl(7, F_SETFD, FD_CLOEXEC) = 0
  685. 368 fcntl(8, F_SETFD, FD_CLOEXEC) = 0
  686. 368 mmap(NULL, 65536, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_ANONYMOUS, -1, 0) = 0x7f453da6f000
  687. 368 mmap(NULL, 1310720, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_ANONYMOUS, -1, 0) = 0x7f453d92f000
  688. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 9
  689. 368 connect(9, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  690. 368 sendto(9, "<39>Nov 28 18:31:24 sshd[368]: d"..., 89, MSG_NOSIGNAL, NULL, 0) = 89
  691. 368 close(9) = 0
  692. 368 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f453da7fa10) = 369
  693. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 9
  694. 369 set_robust_list(0x7f453da7fa20, 24 <unfinished ...>
  695. 368 connect(9, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  696. 369 <... set_robust_list resumed> ) = 0
  697. 368 <... connect resumed> ) = 0
  698. 368 sendto(9, "<39>Nov 28 18:31:24 sshd[368]: d"..., 66, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  699. 369 close(6 <unfinished ...>
  700. 368 <... sendto resumed> ) = 66
  701. 368 close(9 <unfinished ...>
  702. 369 <... close resumed> ) = 0
  703. 368 <... close resumed> ) = 0
  704. 369 close(7 <unfinished ...>
  705. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  706. 369 <... close resumed> ) = 0
  707. 368 <... socket resumed> ) = 9
  708. 368 connect(9, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  709. 369 getuid( <unfinished ...>
  710. 368 <... connect resumed> ) = 0
  711. 368 sendto(9, "<39>Nov 28 18:31:24 sshd[368]: d"..., 68, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  712. 369 <... getuid resumed> ) = 0
  713. 368 <... sendto resumed> ) = 68
  714. 368 close(9) = 0
  715. 368 close(4) = 0
  716. 368 close(8) = 0
  717. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  718. 369 chroot("/var/empty") = 0
  719. 369 chdir("/") = 0
  720. 369 write(8, "\0\0\0 \0\0\0\7\0\0\0\30privsep user:group 9"..., 36) = 36
  721. 368 <... poll resumed> ) = 1 ([{fd=7, revents=POLLIN}])
  722. 369 setgroups(1, [99] <unfinished ...>
  723. 368 read(7, <unfinished ...>
  724. 369 <... setgroups resumed> ) = 0
  725. 368 <... read resumed> "\0\0\0 ", 4) = 4
  726. 369 getuid( <unfinished ...>
  727. 368 read(7, <unfinished ...>
  728. 369 <... getuid resumed> ) = 0
  729. 368 <... read resumed> "\0\0\0\7\0\0\0\30privsep user:group 99:99", 32) = 32
  730. 369 getgid() = 0
  731. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  732. 369 write(8, "\0\0\0\"\0\0\0\5\0\0\0\32permanently_set_uid:"..., 38 <unfinished ...>
  733. 368 <... socket resumed> ) = 4
  734. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  735. 369 <... write resumed> ) = 38
  736. 368 <... connect resumed> ) = 0
  737. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 73, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  738. 369 setresgid(99, 99, 99 <unfinished ...>
  739. 368 <... sendto resumed> ) = 73
  740. 369 <... setresgid resumed> ) = 0
  741. 368 close(4 <unfinished ...>
  742. 369 setresuid(99, 99, 99 <unfinished ...>
  743. 368 <... close resumed> ) = 0
  744. 369 <... setresuid resumed> ) = 0
  745. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  746. 369 setgid(0 <unfinished ...>
  747. 368 <... poll resumed> ) = 1 ([{fd=7, revents=POLLIN}])
  748. 369 <... setgid resumed> ) = -1 EPERM (Operation not permitted)
  749. 368 read(7, <unfinished ...>
  750. 369 setresgid(-1, 0, -1 <unfinished ...>
  751. 368 <... read resumed> "\0\0\0\"", 4) = 4
  752. 369 <... setresgid resumed> ) = -1 EPERM (Operation not permitted)
  753. 368 read(7, <unfinished ...>
  754. 369 getgid( <unfinished ...>
  755. 368 <... read resumed> "\0\0\0\5\0\0\0\32permanently_set_uid: 99/"..., 34) = 34
  756. 369 <... getgid resumed> ) = 99
  757. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  758. 369 getegid( <unfinished ...>
  759. 368 <... socket resumed> ) = 4
  760. 369 <... getegid resumed> ) = 99
  761. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  762. 369 setuid(0 <unfinished ...>
  763. 368 <... connect resumed> ) = 0
  764. 369 <... setuid resumed> ) = -1 EPERM (Operation not permitted)
  765. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 75, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  766. 369 setresuid(-1, 0, -1 <unfinished ...>
  767. 368 <... sendto resumed> ) = 75
  768. 369 <... setresuid resumed> ) = -1 EPERM (Operation not permitted)
  769. 368 close(4 <unfinished ...>
  770. 369 getuid( <unfinished ...>
  771. 368 <... close resumed> ) = 0
  772. 369 <... getuid resumed> ) = 99
  773. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  774. 369 geteuid() = 99
  775. 369 setrlimit(RLIMIT_FSIZE, {rlim_cur=0, rlim_max=0}) = 0
  776. 369 setrlimit(RLIMIT_NOFILE, {rlim_cur=0, rlim_max=0}) = 0
  777. 369 setrlimit(RLIMIT_NPROC, {rlim_cur=0, rlim_max=0}) = 0
  778. 369 write(8, "\0\0\0006\0\0\0\7\0\0\0.ssh_sandbox_child: s"..., 58) = 58
  779. 369 prctl(PR_SET_NO_NEW_PRIVS, 1, 0, 0, 0 <unfinished ...>
  780. 368 <... poll resumed> ) = 1 ([{fd=7, revents=POLLIN}])
  781. 369 <... prctl resumed> ) = 0
  782. 368 read(7, <unfinished ...>
  783. 369 write(8, "\0\0\0;\0\0\0\7\0\0\0003ssh_sandbox_child: a"..., 63 <unfinished ...>
  784. 368 <... read resumed> "\0\0\0006", 4) = 4
  785. 369 <... write resumed> ) = 63
  786. 368 read(7, <unfinished ...>
  787. 369 prctl(PR_SET_SECCOMP, SECCOMP_MODE_FILTER, {len = 55, filter = 0x562697624d20} <unfinished ...>
  788. 368 <... read resumed> "\0\0\0\7\0\0\0.ssh_sandbox_child: setti"..., 54) = 54
  789. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  790. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  791. 369 <... prctl resumed> ) = 0
  792. 368 <... connect resumed> ) = 0
  793. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 95, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  794. 369 write(8, "\0\0\0J\0\0\0\7\0\0\0Blist_hostkey_types: "..., 78 <unfinished ...>
  795. 368 <... sendto resumed> ) = 95
  796. 369 <... write resumed> ) = 78
  797. 368 close(4 <unfinished ...>
  798. 369 write(8, "\0\0\0C\0\0\0\5\0\0\0;list_hostkey_types: "..., 71 <unfinished ...>
  799. 368 <... close resumed> ) = 0
  800. 369 <... write resumed> ) = 71
  801. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  802. 369 write(8, "\0\0\0\35\0\0\0\5\0\0\0\25SSH2_MSG_KEXINIT sen"..., 33 <unfinished ...>
  803. 368 read(7, <unfinished ...>
  804. 369 <... write resumed> ) = 33
  805. 368 <... read resumed> "\0\0\0;", 4) = 4
  806. 369 write(3, "\0\0\3\254\4\0246B>-\352^\250\10\23^\237\260\320\f\242\250\0\0\0\226curve2"..., 944 <unfinished ...>
  807. 368 read(7, <unfinished ...>
  808. 369 <... write resumed> ) = 944
  809. 368 <... read resumed> "\0\0\0\7\0\0\0003ssh_sandbox_child: attac"..., 59) = 59
  810. 369 select(4, [3], NULL, NULL, NULL <unfinished ...>
  811. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  812. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  813. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 100, MSG_NOSIGNAL, NULL, 0) = 100
  814. 368 close(4) = 0
  815. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  816. 368 read(7, "\0\0\0J", 4) = 4
  817. 368 read(7, "\0\0\0\7\0\0\0Blist_hostkey_types: ssh-"..., 74) = 74
  818. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  819. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  820. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 115, MSG_NOSIGNAL, NULL, 0) = 115
  821. 368 close(4) = 0
  822. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  823. 368 read(7, "\0\0\0C", 4) = 4
  824. 368 read(7, "\0\0\0\5\0\0\0;list_hostkey_types: ssh-"..., 67) = 67
  825. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  826. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  827. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 108, MSG_NOSIGNAL, NULL, 0) = 108
  828. 368 close(4) = 0
  829. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  830. 368 read(7, "\0\0\0\35", 4) = 4
  831. 368 read(7, "\0\0\0\5\0\0\0\25SSH2_MSG_KEXINIT sent", 29) = 29
  832. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  833. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  834. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 70, MSG_NOSIGNAL, NULL, 0) = 70
  835. 368 close(4) = 0
  836. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  837. 369 <... select resumed> ) = 1 (in [3])
  838. 369 read(3, "\0\0\7\254\10\24\233\262\25\246\306\313\313\241MDWB\275\214\335\255\0\0\0\324curve2"..., 8192) = 1968
  839. 369 write(8, "\0\0\0!\0\0\0\5\0\0\0\31SSH2_MSG_KEXINIT rec"..., 37) = 37
  840. 368 <... poll resumed> ) = 1 ([{fd=7, revents=POLLIN}])
  841. 369 write(8, "\0\0\0\261\0\0\0\6\0\0\0\251kex_parse_kexinit: c"..., 181 <unfinished ...>
  842. 368 read(7, "\0\0\0!", 4) = 4
  843. 369 <... write resumed> ) = 181
  844. 368 read(7, "\0\0\0\5\0\0\0\31SSH2_MSG_KEXINIT receive"..., 33) = 33
  845. 369 write(8, "\0\0\0B\0\0\0\6\0\0\0:kex_parse_kexinit: s"..., 70 <unfinished ...>
  846. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  847. 369 <... write resumed> ) = 70
  848. 368 <... socket resumed> ) = 4
  849. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  850. 369 write(8, "\0\0\0\207\0\0\0\6\0\0\0\177kex_parse_kexinit: c"..., 139 <unfinished ...>
  851. 368 <... connect resumed> ) = 0
  852. 369 <... write resumed> ) = 139
  853. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 74, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  854. 369 write(8, "\0\0\0\207\0\0\0\6\0\0\0\177kex_parse_kexinit: c"..., 139 <unfinished ...>
  855. 368 <... sendto resumed> ) = 74
  856. 368 close(4) = 0
  857. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  858. 368 read(7, "\0\0\0\261", 4) = 4
  859. 368 read(7, "\0\0\0\6\0\0\0\251kex_parse_kexinit: curve"..., 177) = 177
  860. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  861. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  862. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 218, MSG_NOSIGNAL, NULL, 0) = 218
  863. 368 close(4) = 0
  864. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  865. 368 read(7, "\0\0\0B", 4) = 4
  866. 368 read(7, "\0\0\0\6\0\0\0:kex_parse_kexinit: ssh-r"..., 66) = 66
  867. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  868. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  869. 369 <... write resumed> ) = 139
  870. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 107, MSG_NOSIGNAL, NULL, 0) = 107
  871. 369 write(8, "\0\0\0\360\0\0\0\6\0\0\0\350kex_parse_kexinit: u"..., 244 <unfinished ...>
  872. 368 close(4) = 0
  873. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  874. 368 read(7, "\0\0\0\207", 4) = 4
  875. 368 read(7, "\0\0\0\6\0\0\0\177kex_parse_kexinit: chach"..., 135) = 135
  876. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  877. 369 <... write resumed> ) = 244
  878. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  879. 369 write(8, "\0\0\0\360\0\0\0\6\0\0\0\350kex_parse_kexinit: u"..., 244 <unfinished ...>
  880. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 176, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  881. 369 <... write resumed> ) = 244
  882. 368 <... sendto resumed> ) = 176
  883. 368 close(4) = 0
  884. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  885. 368 read(7, "\0\0\0\207", 4) = 4
  886. 368 read(7, "\0\0\0\6\0\0\0\177kex_parse_kexinit: chach"..., 135) = 135
  887. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  888. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  889. 369 write(8, "\0\0\0000\0\0\0\6\0\0\0(kex_parse_kexinit: n"..., 52 <unfinished ...>
  890. 368 <... connect resumed> ) = 0
  891. 369 <... write resumed> ) = 52
  892. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 176, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  893. 369 write(8, "\0\0\0000\0\0\0\6\0\0\0(kex_parse_kexinit: n"..., 52 <unfinished ...>
  894. 368 <... sendto resumed> ) = 176
  895. 368 close(4) = 0
  896. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  897. 368 read(7, "\0\0\0\360", 4) = 4
  898. 368 read(7, "\0\0\0\6\0\0\0\350kex_parse_kexinit: umac-"..., 240) = 240
  899. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  900. 369 <... write resumed> ) = 52
  901. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  902. 369 write(8, "\0\0\0\33\0\0\0\6\0\0\0\23kex_parse_kexinit: ", 31 <unfinished ...>
  903. 368 <... connect resumed> ) = 0
  904. 369 <... write resumed> ) = 31
  905. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 281, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  906. 369 write(8, "\0\0\0\33\0\0\0\6\0\0\0\23kex_parse_kexinit: ", 31 <unfinished ...>
  907. 368 <... sendto resumed> ) = 281
  908. 368 close(4) = 0
  909. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  910. 368 read(7, "\0\0\0\360", 4) = 4
  911. 368 read(7, "\0\0\0\6\0\0\0\350kex_parse_kexinit: umac-"..., 240) = 240
  912. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  913. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  914. 369 <... write resumed> ) = 31
  915. 368 <... connect resumed> ) = 0
  916. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 281, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  917. 369 write(8, "\0\0\0/\0\0\0\6\0\0\0'kex_parse_kexinit: f"..., 51 <unfinished ...>
  918. 368 <... sendto resumed> ) = 281
  919. 368 close(4) = 0
  920. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  921. 368 read(7, "\0\0\0000", 4) = 4
  922. 368 read(7, "\0\0\0\6\0\0\0(kex_parse_kexinit: none,"..., 48) = 48
  923. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  924. 369 <... write resumed> ) = 51
  925. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  926. 369 write(8, "\0\0\0&\0\0\0\6\0\0\0\36kex_parse_kexinit: r"..., 42 <unfinished ...>
  927. 368 <... connect resumed> ) = 0
  928. 369 <... write resumed> ) = 42
  929. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 89, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  930. 369 write(8, "\0\0\0\357\0\0\0\6\0\0\0\347kex_parse_kexinit: c"..., 243 <unfinished ...>
  931. 368 <... sendto resumed> ) = 89
  932. 368 close(4) = 0
  933. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  934. 368 read(7, "\0\0\0000", 4) = 4
  935. 368 read(7, "\0\0\0\6\0\0\0(kex_parse_kexinit: none,"..., 48) = 48
  936. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  937. 369 <... write resumed> ) = 243
  938. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  939. 369 write(8, "\0\0\1\202\0\0\0\6\0\0\1zkex_parse_kexinit: e"..., 390 <unfinished ...>
  940. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 89, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  941. 369 <... write resumed> ) = 390
  942. 368 <... sendto resumed> ) = 89
  943. 368 close(4) = 0
  944. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  945. 368 read(7, "\0\0\0\33", 4) = 4
  946. 368 read(7, "\0\0\0\6\0\0\0\23kex_parse_kexinit: ", 27) = 27
  947. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  948. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  949. 369 write(8, "\0\0\1\4\0\0\0\6\0\0\0\374kex_parse_kexinit: a"..., 264 <unfinished ...>
  950. 368 <... connect resumed> ) = 0
  951. 369 <... write resumed> ) = 264
  952. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 68, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  953. 369 write(8, "\0\0\1\4\0\0\0\6\0\0\0\374kex_parse_kexinit: a"..., 264 <unfinished ...>
  954. 368 <... sendto resumed> ) = 68
  955. 368 close(4) = 0
  956. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  957. 368 read(7, "\0\0\0\33", 4) = 4
  958. 368 read(7, "\0\0\0\6\0\0\0\23kex_parse_kexinit: ", 27) = 27
  959. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  960. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  961. 369 <... write resumed> ) = 264
  962. 368 <... connect resumed> ) = 0
  963. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 68, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  964. 369 write(8, "\0\0\1\255\0\0\0\6\0\0\1\245kex_parse_kexinit: u"..., 433 <unfinished ...>
  965. 368 <... sendto resumed> ) = 68
  966. 368 close(4) = 0
  967. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  968. 368 read(7, "\0\0\0/", 4) = 4
  969. 368 read(7, "\0\0\0\6\0\0\0'kex_parse_kexinit: first"..., 47) = 47
  970. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  971. 369 <... write resumed> ) = 433
  972. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  973. 369 write(8, "\0\0\1\255\0\0\0\6\0\0\1\245kex_parse_kexinit: u"..., 433 <unfinished ...>
  974. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 88, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  975. 369 <... write resumed> ) = 433
  976. 368 <... sendto resumed> ) = 88
  977. 368 close(4) = 0
  978. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  979. 368 read(7, "\0\0\0&", 4) = 4
  980. 368 read(7, "\0\0\0\6\0\0\0\36kex_parse_kexinit: reser"..., 38) = 38
  981. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  982. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  983. 369 write(8, "\0\0\0005\0\0\0\6\0\0\0-kex_parse_kexinit: n"..., 57 <unfinished ...>
  984. 368 <... connect resumed> ) = 0
  985. 369 <... write resumed> ) = 57
  986. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 79, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  987. 369 write(8, "\0\0\0005\0\0\0\6\0\0\0-kex_parse_kexinit: n"..., 57 <unfinished ...>
  988. 368 <... sendto resumed> ) = 79
  989. 368 close(4) = 0
  990. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  991. 368 read(7, "\0\0\0\357", 4) = 4
  992. 368 read(7, "\0\0\0\6\0\0\0\347kex_parse_kexinit: curve"..., 239) = 239
  993. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  994. 369 <... write resumed> ) = 57
  995. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  996. 369 write(8, "\0\0\0\33\0\0\0\6\0\0\0\23kex_parse_kexinit: ", 31 <unfinished ...>
  997. 368 <... connect resumed> ) = 0
  998. 369 <... write resumed> ) = 31
  999. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 280, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  1000. 369 write(8, "\0\0\0\33\0\0\0\6\0\0\0\23kex_parse_kexinit: ", 31 <unfinished ...>
  1001. 368 <... sendto resumed> ) = 280
  1002. 368 close(4) = 0
  1003. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1004. 368 read(7, "\0\0\1\202", 4) = 4
  1005. 368 read(7, "\0\0\0\6\0\0\1zkex_parse_kexinit: ecdsa"..., 386) = 386
  1006. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1007. 369 <... write resumed> ) = 31
  1008. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  1009. 369 write(8, "\0\0\0/\0\0\0\6\0\0\0'kex_parse_kexinit: f"..., 51 <unfinished ...>
  1010. 368 <... connect resumed> ) = 0
  1011. 369 <... write resumed> ) = 51
  1012. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 427, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  1013. 369 write(8, "\0\0\0&\0\0\0\6\0\0\0\36kex_parse_kexinit: r"..., 42 <unfinished ...>
  1014. 368 <... sendto resumed> ) = 427
  1015. 368 close(4) = 0
  1016. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1017. 368 read(7, "\0\0\1\4", 4) = 4
  1018. 368 read(7, "\0\0\0\6\0\0\0\374kex_parse_kexinit: aes12"..., 260) = 260
  1019. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1020. 369 <... write resumed> ) = 42
  1021. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1022. 369 write(8, "\0\0\0C\0\0\0\5\0\0\0;kex: client->server "..., 71 <unfinished ...>
  1023. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 301, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  1024. 369 <... write resumed> ) = 71
  1025. 368 <... sendto resumed> ) = 301
  1026. 368 close(4) = 0
  1027. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1028. 368 read(7, "\0\0\1\4", 4) = 4
  1029. 368 read(7, "\0\0\0\6\0\0\0\374kex_parse_kexinit: aes12"..., 260) = 260
  1030. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1031. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  1032. 369 write(8, "\0\0\0C\0\0\0\5\0\0\0;kex: server->client "..., 71 <unfinished ...>
  1033. 368 <... connect resumed> ) = 0
  1034. 369 <... write resumed> ) = 71
  1035. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 301, MSG_NOSIGNAL, NULL, 0) = 301
  1036. 369 write(8, "\0\0\0(\0\0\0\5\0\0\0 expecting SSH2_MSG_K"..., 44 <unfinished ...>
  1037. 368 close(4) = 0
  1038. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1039. 368 read(7, "\0\0\1\255", 4) = 4
  1040. 368 read(7, "\0\0\0\6\0\0\1\245kex_parse_kexinit: umac-"..., 429) = 429
  1041. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1042. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  1043. 369 <... write resumed> ) = 44
  1044. 368 <... connect resumed> ) = 0
  1045. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 470, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  1046. 369 select(4, [3], NULL, NULL, NULL <unfinished ...>
  1047. 368 <... sendto resumed> ) = 470
  1048. 368 close(4) = 0
  1049. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1050. 368 read(7, "\0\0\1\255", 4) = 4
  1051. 368 read(7, "\0\0\0\6\0\0\1\245kex_parse_kexinit: umac-"..., 429) = 429
  1052. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1053. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1054. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 470, MSG_NOSIGNAL, NULL, 0) = 470
  1055. 368 close(4) = 0
  1056. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1057. 368 read(7, "\0\0\0005", 4) = 4
  1058. 368 read(7, "\0\0\0\6\0\0\0-kex_parse_kexinit: none,"..., 53) = 53
  1059. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1060. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1061. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 94, MSG_NOSIGNAL, NULL, 0) = 94
  1062. 368 close(4) = 0
  1063. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1064. 368 read(7, "\0\0\0005", 4) = 4
  1065. 368 read(7, "\0\0\0\6\0\0\0-kex_parse_kexinit: none,"..., 53) = 53
  1066. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1067. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1068. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 94, MSG_NOSIGNAL, NULL, 0) = 94
  1069. 368 close(4) = 0
  1070. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1071. 368 read(7, "\0\0\0\33", 4) = 4
  1072. 368 read(7, "\0\0\0\6\0\0\0\23kex_parse_kexinit: ", 27) = 27
  1073. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1074. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1075. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 68, MSG_NOSIGNAL, NULL, 0) = 68
  1076. 368 close(4) = 0
  1077. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1078. 368 read(7, "\0\0\0\33", 4) = 4
  1079. 368 read(7, "\0\0\0\6\0\0\0\23kex_parse_kexinit: ", 27) = 27
  1080. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1081. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1082. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 68, MSG_NOSIGNAL, NULL, 0) = 68
  1083. 368 close(4) = 0
  1084. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1085. 368 read(7, "\0\0\0/", 4) = 4
  1086. 368 read(7, "\0\0\0\6\0\0\0'kex_parse_kexinit: first"..., 47) = 47
  1087. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1088. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1089. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 88, MSG_NOSIGNAL, NULL, 0) = 88
  1090. 368 close(4) = 0
  1091. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1092. 368 read(7, "\0\0\0&", 4) = 4
  1093. 368 read(7, "\0\0\0\6\0\0\0\36kex_parse_kexinit: reser"..., 38) = 38
  1094. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1095. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1096. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 79, MSG_NOSIGNAL, NULL, 0) = 79
  1097. 368 close(4) = 0
  1098. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1099. 368 read(7, "\0\0\0C", 4) = 4
  1100. 368 read(7, "\0\0\0\5\0\0\0;kex: client->server aes1"..., 67) = 67
  1101. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1102. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1103. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 108, MSG_NOSIGNAL, NULL, 0) = 108
  1104. 368 close(4) = 0
  1105. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1106. 368 read(7, "\0\0\0C", 4) = 4
  1107. 368 read(7, "\0\0\0\5\0\0\0;kex: server->client aes1"..., 67) = 67
  1108. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1109. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1110. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 108, MSG_NOSIGNAL, NULL, 0) = 108
  1111. 368 close(4) = 0
  1112. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1113. 368 read(7, "\0\0\0(", 4) = 4
  1114. 368 read(7, "\0\0\0\5\0\0\0 expecting SSH2_MSG_KEX_E"..., 40) = 40
  1115. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1116. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1117. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 81, MSG_NOSIGNAL, NULL, 0) = 81
  1118. 368 close(4) = 0
  1119. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  1120. 369 <... select resumed> ) = 1 (in [3])
  1121. 369 read(3, "\0\0\0,\6\36\0\0\0 k:\270\34\374@G\255\361\330g\0307;\6\4YK\316Dk\353"..., 8192) = 48
  1122. 369 write(8, "\0\0\0\34\0\0\0\7\0\0\0\24mm_key_sign entering", 32) = 32
  1123. 368 <... poll resumed> ) = 1 ([{fd=7, revents=POLLIN}])
  1124. 369 write(8, "\0\0\0(\0\0\0\7\0\0\0 mm_request_send ente"..., 44 <unfinished ...>
  1125. 368 read(7, "\0\0\0\34", 4) = 4
  1126. 369 <... write resumed> ) = 44
  1127. 368 read(7, <unfinished ...>
  1128. 369 write(4, "\0\0\0)\6", 5 <unfinished ...>
  1129. 368 <... read resumed> "\0\0\0\7\0\0\0\24mm_key_sign entering", 28) = 28
  1130. 369 <... write resumed> ) = 5
  1131. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  1132. 369 write(4, "\0\0\0\2\0\0\0 6M1\23F\27\220s\374\265S\252m1v\336\17\\qHv\251\6!"..., 40 <unfinished ...>
  1133. 368 <... socket resumed> ) = 4
  1134. 369 <... write resumed> ) = 40
  1135. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  1136. 369 write(8, "\0\0\0001\0\0\0\7\0\0\0)mm_key_sign: waiting"..., 53 <unfinished ...>
  1137. 368 <... connect resumed> ) = 0
  1138. 369 <... write resumed> ) = 53
  1139. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 69, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  1140. 369 write(8, "\0\0\0002\0\0\0\7\0\0\0*mm_request_receive_e"..., 54 <unfinished ...>
  1141. 368 <... sendto resumed> ) = 69
  1142. 368 close(4) = 0
  1143. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1144. 368 read(7, "\0\0\0(", 4) = 4
  1145. 368 read(7, "\0\0\0\7\0\0\0 mm_request_send entering"..., 40) = 40
  1146. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1147. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  1148. 369 <... write resumed> ) = 54
  1149. 368 <... connect resumed> ) = 0
  1150. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 81, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  1151. 369 write(8, "\0\0\0#\0\0\0\7\0\0\0\33mm_request_receive e"..., 39 <unfinished ...>
  1152. 368 <... sendto resumed> ) = 81
  1153. 368 close(4) = 0
  1154. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1155. 368 read(7, "\0\0\0001", 4) = 4
  1156. 368 read(7, "\0\0\0\7\0\0\0)mm_key_sign: waiting for"..., 49) = 49
  1157. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1158. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  1159. 369 <... write resumed> ) = 39
  1160. 368 <... connect resumed> ) = 0
  1161. 369 read(4, <unfinished ...>
  1162. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 90, MSG_NOSIGNAL, NULL, 0) = 90
  1163. 368 close(4) = 0
  1164. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1165. 368 read(7, "\0\0\0002", 4) = 4
  1166. 368 read(7, "\0\0\0\7\0\0\0*mm_request_receive_expec"..., 50) = 50
  1167. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1168. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1169. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 91, MSG_NOSIGNAL, NULL, 0) = 91
  1170. 368 close(4) = 0
  1171. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1172. 368 read(7, "\0\0\0#", 4) = 4
  1173. 368 read(7, "\0\0\0\7\0\0\0\33mm_request_receive enter"..., 35) = 35
  1174. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1175. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1176. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 76, MSG_NOSIGNAL, NULL, 0) = 76
  1177. 368 close(4) = 0
  1178. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=6, revents=POLLIN}])
  1179. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1180. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1181. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 66, MSG_NOSIGNAL, NULL, 0) = 66
  1182. 368 close(4) = 0
  1183. 368 read(6, "\0\0\0)", 4) = 4
  1184. 368 read(6, "\6\0\0\0\2\0\0\0 6M1\23F\27\220s\374\265S\252m1v\336\17\\qHv\251\6"..., 41) = 41
  1185. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1186. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1187. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 71, MSG_NOSIGNAL, NULL, 0) = 71
  1188. 368 close(4) = 0
  1189. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1190. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1191. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 53, MSG_NOSIGNAL, NULL, 0) = 53
  1192. 368 close(4) = 0
  1193. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1194. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1195. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 98, MSG_NOSIGNAL, NULL, 0) = 98
  1196. 368 close(4) = 0
  1197. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1198. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1199. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 71, MSG_NOSIGNAL, NULL, 0) = 71
  1200. 368 close(4) = 0
  1201. 368 write(6, "\0\0\0i\7", 5 <unfinished ...>
  1202. 369 <... read resumed> "\0\0\0i", 4) = 4
  1203. 369 read(4, "\7", 105) = 1
  1204. 369 read(4, <unfinished ...>
  1205. 368 <... write resumed> ) = 5
  1206. 368 write(6, "\0\0\0d\0\0\0\23ecdsa-sha2-nistp256\0\0\0I\0"..., 104 <unfinished ...>
  1207. 369 <... read resumed> "\0\0\0d\0\0\0\23ecdsa-sha2-nistp256\0\0\0I\0"..., 104) = 104
  1208. 369 write(8, "\0\0\0\33\0\0\0\6\0\0\0\23set_newkeys: mode 1", 31) = 31
  1209. 369 clock_gettime(CLOCK_BOOTTIME, {2520, 816744261}) = 0
  1210. 369 write(8, "\0\0\0\35\0\0\0\5\0\0\0\25SSH2_MSG_NEWKEYS sen"..., 33) = 33
  1211. 369 write(8, "\0\0\0\"\0\0\0\5\0\0\0\32expecting SSH2_MSG_N"..., 38) = 38
  1212. 369 write(3, "\0\0\1\4\n\37\0\0\0h\0\0\0\23ecdsa-sha2-nistp25"..., 280) = 280
  1213. 369 select(4, [3], NULL, NULL, NULL <unfinished ...>
  1214. 368 <... write resumed> ) = 104
  1215. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1216. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1217. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 79, MSG_NOSIGNAL, NULL, 0) = 79
  1218. 368 close(4) = 0
  1219. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1220. 368 read(7, "\0\0\0\33", 4) = 4
  1221. 368 read(7, "\0\0\0\6\0\0\0\23set_newkeys: mode 1", 27) = 27
  1222. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1223. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1224. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 68, MSG_NOSIGNAL, NULL, 0) = 68
  1225. 368 close(4) = 0
  1226. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1227. 368 read(7, "\0\0\0\35", 4) = 4
  1228. 368 read(7, "\0\0\0\5\0\0\0\25SSH2_MSG_NEWKEYS sent", 29) = 29
  1229. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1230. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1231. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 70, MSG_NOSIGNAL, NULL, 0) = 70
  1232. 368 close(4) = 0
  1233. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1234. 368 read(7, "\0\0\0\"", 4) = 4
  1235. 368 read(7, "\0\0\0\5\0\0\0\32expecting SSH2_MSG_NEWKE"..., 34) = 34
  1236. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1237. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1238. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 75, MSG_NOSIGNAL, NULL, 0) = 75
  1239. 368 close(4) = 0
  1240. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  1241. 369 <... select resumed> ) = 1 (in [3])
  1242. 369 read(3, "\0\0\0\f\n\25\0\0\0\0\0\0\0\0\0\0", 8192) = 16
  1243. 369 write(8, "\0\0\0\33\0\0\0\6\0\0\0\23set_newkeys: mode 0", 31) = 31
  1244. 369 write(8, "\0\0\0!\0\0\0\5\0\0\0\31SSH2_MSG_NEWKEYS rec"..., 37) = 37
  1245. 369 write(8, "\0\0\0\20\0\0\0\5\0\0\0\10KEX done", 20) = 20
  1246. 369 select(4, [3], NULL, NULL, NULL <unfinished ...>
  1247. 368 <... poll resumed> ) = 1 ([{fd=7, revents=POLLIN}])
  1248. 368 read(7, "\0\0\0\33", 4) = 4
  1249. 368 read(7, "\0\0\0\6\0\0\0\23set_newkeys: mode 0", 27) = 27
  1250. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1251. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1252. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 68, MSG_NOSIGNAL, NULL, 0) = 68
  1253. 368 close(4) = 0
  1254. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1255. 368 read(7, "\0\0\0!", 4) = 4
  1256. 368 read(7, "\0\0\0\5\0\0\0\31SSH2_MSG_NEWKEYS receive"..., 33) = 33
  1257. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1258. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1259. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 74, MSG_NOSIGNAL, NULL, 0) = 74
  1260. 368 close(4) = 0
  1261. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  1262. 368 read(7, "\0\0\0\20", 4) = 4
  1263. 368 read(7, "\0\0\0\5\0\0\0\10KEX done", 16) = 16
  1264. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1265. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1266. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 57, MSG_NOSIGNAL, NULL, 0) = 57
  1267. 368 close(4) = 0
  1268. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  1269. 369 <... select resumed> ) = 1 (in [3])
  1270. 369 read(3, "\0\0\0 \370\16\277\4+\n\300^ D\325\267\227\20\267\0079)\31\345\32\305\342D*\226\4\300"..., 8192) = 44
  1271. 369 write(3, "\0\0\0 \254\205\24\356\365\f\365Uo\230\377\300\2562\f{6\333\263\0358\21=(\256\376\\\v"..., 44) = 44
  1272. 369 select(4, [3], NULL, NULL, NULL) = 1 (in [3])
  1273. 369 read(3, "\0\0\0000)\210\376\vH\360M\204D\276\26\336\211w\346s\331v\314\224-\240\36(\35:r\177"..., 8192) = 60
  1274. 369 write(8, "\0\0\0I\0\0\0\5\0\0\0Auserauth-request for"..., 77) = 77
  1275. 369 write(8, "\0\0\0\34\0\0\0\5\0\0\0\24attempt 0 failures 0", 32) = 32
  1276. 369 write(8, "\0\0\0!\0\0\0\7\0\0\0\31mm_getpwnamallow ent"..., 37) = 37
  1277. 369 write(8, "\0\0\0(\0\0\0\7\0\0\0 mm_request_send ente"..., 44) = 44
  1278. 369 write(4, "\0\0\0\t\10", 5) = 5
  1279. 369 write(4, "\0\0\0\4root", 8) = 8
  1280. 369 write(8, "\0\0\0007\0\0\0\7\0\0\0/mm_getpwnamallow: wa"..., 59) = 59
  1281. 369 write(8, "\0\0\0002\0\0\0\7\0\0\0*mm_request_receive_e"..., 54) = 54
  1282. 369 write(8, "\0\0\0#\0\0\0\7\0\0\0\33mm_request_receive e"..., 39) = 39
  1283. 369 read(4, <unfinished ...>
  1284. 368 <... poll resumed> ) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1285. 368 read(7, "\0\0\0I", 4) = 4
  1286. 368 read(7, "\0\0\0\5\0\0\0Auserauth-request for use"..., 73) = 73
  1287. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1288. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1289. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 114, MSG_NOSIGNAL, NULL, 0) = 114
  1290. 368 close(4) = 0
  1291. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1292. 368 read(7, "\0\0\0\34", 4) = 4
  1293. 368 read(7, "\0\0\0\5\0\0\0\24attempt 0 failures 0", 28) = 28
  1294. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1295. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1296. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 69, MSG_NOSIGNAL, NULL, 0) = 69
  1297. 368 close(4) = 0
  1298. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1299. 368 read(7, "\0\0\0!", 4) = 4
  1300. 368 read(7, "\0\0\0\7\0\0\0\31mm_getpwnamallow enterin"..., 33) = 33
  1301. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1302. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1303. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 74, MSG_NOSIGNAL, NULL, 0) = 74
  1304. 368 close(4) = 0
  1305. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1306. 368 read(7, "\0\0\0(", 4) = 4
  1307. 368 read(7, "\0\0\0\7\0\0\0 mm_request_send entering"..., 40) = 40
  1308. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1309. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1310. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 81, MSG_NOSIGNAL, NULL, 0) = 81
  1311. 368 close(4) = 0
  1312. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1313. 368 read(7, "\0\0\0007", 4) = 4
  1314. 368 read(7, "\0\0\0\7\0\0\0/mm_getpwnamallow: waitin"..., 55) = 55
  1315. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1316. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1317. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 96, MSG_NOSIGNAL, NULL, 0) = 96
  1318. 368 close(4) = 0
  1319. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1320. 368 read(7, "\0\0\0002", 4) = 4
  1321. 368 read(7, "\0\0\0\7\0\0\0*mm_request_receive_expec"..., 50) = 50
  1322. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1323. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1324. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 91, MSG_NOSIGNAL, NULL, 0) = 91
  1325. 368 close(4) = 0
  1326. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1327. 368 read(7, "\0\0\0#", 4) = 4
  1328. 368 read(7, "\0\0\0\7\0\0\0\33mm_request_receive enter"..., 35) = 35
  1329. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1330. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1331. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 76, MSG_NOSIGNAL, NULL, 0) = 76
  1332. 368 close(4) = 0
  1333. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=6, revents=POLLIN}])
  1334. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1335. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1336. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 66, MSG_NOSIGNAL, NULL, 0) = 66
  1337. 368 close(4) = 0
  1338. 368 read(6, "\0\0\0\t", 4) = 4
  1339. 368 read(6, "\10\0\0\0\4root", 9) = 9
  1340. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1341. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1342. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 71, MSG_NOSIGNAL, NULL, 0) = 71
  1343. 368 close(4) = 0
  1344. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1345. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1346. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 59, MSG_NOSIGNAL, NULL, 0) = 59
  1347. 368 close(4) = 0
  1348. 368 getsockname(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("82.208.102.28")}, [16]) = 0
  1349. 368 getsockname(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("82.208.102.28")}, [16]) = 0
  1350. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1351. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1352. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 91, MSG_NOSIGNAL, NULL, 0) = 91
  1353. 368 close(4) = 0
  1354. 368 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 4
  1355. 368 fstat(4, {st_mode=S_IFREG|0644, st_size=920, ...}) = 0
  1356. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  1357. 368 read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 920
  1358. 368 close(4) = 0
  1359. 368 munmap(0x7f453da8f000, 4096) = 0
  1360. 368 stat("/bin/bash", {st_mode=S_IFREG|0755, st_size=791304, ...}) = 0
  1361. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1362. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1363. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 89, MSG_NOSIGNAL, NULL, 0) = 89
  1364. 368 close(4) = 0
  1365. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1366. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1367. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 71, MSG_NOSIGNAL, NULL, 0) = 71
  1368. 368 close(4) = 0
  1369. 368 write(6, "\0\0h\265\t", 5) = 5
  1370. 369 <... read resumed> "\0\0h\265", 4) = 4
  1371. 369 read(4, "\t", 26805) = 1
  1372. 369 read(4, <unfinished ...>
  1373. 368 write(6, "\1\0\0\0000`\335\371\227&V\0\0000\333\371\227&V\0\0\0\0\0\0\0\0\0\0P\333\371"..., 26804) = 26804
  1374. 369 <... read resumed> "\1\0\0\0000`\335\371\227&V\0\0000\333\371\227&V\0\0\0\0\0\0\0\0\0\0P\333\371"..., 26804) = 26804
  1375. 369 write(8, "\0\0\0<\0\0\0\6\0\0\0004input_userauth_reque"..., 64) = 64
  1376. 369 write(8, "\0\0\0\35\0\0\0\7\0\0\0\25mm_start_pam enterin"..., 33) = 33
  1377. 369 write(8, "\0\0\0*\0\0\0\7\0\0\0\"mm_request_send ente"..., 46) = 46
  1378. 369 write(4, "\0\0\0\1d", 5) = 5
  1379. 369 write(8, "\0\0\0#\0\0\0\7\0\0\0\33mm_inform_authserv e"..., 39) = 39
  1380. 369 write(8, "\0\0\0(\0\0\0\7\0\0\0 mm_request_send ente"..., 44) = 44
  1381. 369 write(4, "\0\0\0\27\4", 5) = 5
  1382. 369 write(4, "\0\0\0\16ssh-connection\0\0\0\0", 22) = 22
  1383. 369 write(8, "\0\0\0/\0\0\0\6\0\0\0'input_userauth_reque"..., 51) = 51
  1384. 369 write(8, "\0\0\0L\0\0\0\7\0\0\0Duserauth_finish: fai"..., 80) = 80
  1385. 369 write(3, "\0\0\0 C\27V\36\t\20\265\226t\257u\363\215\301\214\332\347O\322\227\207O\374\356\334p9\340"..., 44) = 44
  1386. 369 select(4, [3], NULL, NULL, NULL <unfinished ...>
  1387. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1388. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1389. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 79, MSG_NOSIGNAL, NULL, 0) = 79
  1390. 368 close(4) = 0
  1391. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1392. 368 read(7, "\0\0\0<", 4) = 4
  1393. 368 read(7, "\0\0\0\6\0\0\0004input_userauth_request: "..., 60) = 60
  1394. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1395. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1396. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 101, MSG_NOSIGNAL, NULL, 0) = 101
  1397. 368 close(4) = 0
  1398. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1399. 368 read(7, "\0\0\0\35", 4) = 4
  1400. 368 read(7, "\0\0\0\7\0\0\0\25mm_start_pam entering", 29) = 29
  1401. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1402. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1403. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 70, MSG_NOSIGNAL, NULL, 0) = 70
  1404. 368 close(4) = 0
  1405. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1406. 368 read(7, "\0\0\0*", 4) = 4
  1407. 368 read(7, "\0\0\0\7\0\0\0\"mm_request_send entering"..., 42) = 42
  1408. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1409. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1410. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 83, MSG_NOSIGNAL, NULL, 0) = 83
  1411. 368 close(4) = 0
  1412. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1413. 368 read(7, "\0\0\0#", 4) = 4
  1414. 368 read(7, "\0\0\0\7\0\0\0\33mm_inform_authserv enter"..., 35) = 35
  1415. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1416. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1417. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 76, MSG_NOSIGNAL, NULL, 0) = 76
  1418. 368 close(4) = 0
  1419. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1420. 368 read(7, "\0\0\0(", 4) = 4
  1421. 368 read(7, "\0\0\0\7\0\0\0 mm_request_send entering"..., 40) = 40
  1422. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1423. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1424. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 81, MSG_NOSIGNAL, NULL, 0) = 81
  1425. 368 close(4) = 0
  1426. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1427. 368 read(7, "\0\0\0/", 4) = 4
  1428. 368 read(7, "\0\0\0\6\0\0\0'input_userauth_request: "..., 47) = 47
  1429. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1430. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1431. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 88, MSG_NOSIGNAL, NULL, 0) = 88
  1432. 368 close(4) = 0
  1433. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1434. 368 read(7, "\0\0\0L", 4) = 4
  1435. 368 read(7, "\0\0\0\7\0\0\0Duserauth_finish: failure"..., 76) = 76
  1436. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1437. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1438. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 117, MSG_NOSIGNAL, NULL, 0) = 117
  1439. 368 close(4) = 0
  1440. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=6, revents=POLLIN}])
  1441. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1442. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1443. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 66, MSG_NOSIGNAL, NULL, 0) = 66
  1444. 368 close(4) = 0
  1445. 368 read(6, "\0\0\0\1", 4) = 4
  1446. 368 read(6, "d", 1) = 1
  1447. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1448. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1449. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 73, MSG_NOSIGNAL, NULL, 0) = 73
  1450. 368 close(4) = 0
  1451. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1452. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1453. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 67, MSG_NOSIGNAL, NULL, 0) = 67
  1454. 368 close(4) = 0
  1455. 368 stat("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  1456. 368 open("/etc/pam.d/sshd", O_RDONLY) = 4
  1457. 368 fstat(4, {st_mode=S_IFREG|0644, st_size=232, ...}) = 0
  1458. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  1459. 368 read(4, "#%PAM-1.0\n#auth required pa"..., 4096) = 232
  1460. 368 open("/etc/pam.d/system-remote-login", O_RDONLY) = 8
  1461. 368 fstat(8, {st_mode=S_IFREG|0644, st_size=143, ...}) = 0
  1462. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8e000
  1463. 368 read(8, "#%PAM-1.0\n\nauth include s"..., 4096) = 143
  1464. 368 open("/etc/pam.d/system-login", O_RDONLY) = 9
  1465. 368 fstat(9, {st_mode=S_IFREG|0644, st_size=619, ...}) = 0
  1466. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8d000
  1467. 368 read(9, "#%PAM-1.0\n\nauth required "..., 4096) = 619
  1468. 368 futex(0x7f453c2c00c8, FUTEX_WAKE_PRIVATE, 2147483647) = 0
  1469. 368 open("/usr/lib/security/pam_tally.so", O_RDONLY|O_CLOEXEC) = 10
  1470. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\r\0\0\0\0\0\0"..., 832) = 832
  1471. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=14448, ...}) = 0
  1472. 368 mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f453b02d000
  1473. 368 mprotect(0x7f453b030000, 2093056, PROT_NONE) = 0
  1474. 368 mmap(0x7f453b22f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x2000) = 0x7f453b22f000
  1475. 368 close(10) = 0
  1476. 368 mprotect(0x7f453b22f000, 4096, PROT_READ) = 0
  1477. 368 open("/usr/lib/security/pam_shells.so", O_RDONLY|O_CLOEXEC) = 10
  1478. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\10\0\0\0\0\0\0"..., 832) = 832
  1479. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=6128, ...}) = 0
  1480. 368 mmap(NULL, 2101376, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f453ae2b000
  1481. 368 mprotect(0x7f453ae2c000, 2093056, PROT_NONE) = 0
  1482. 368 mmap(0x7f453b02b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0) = 0x7f453b02b000
  1483. 368 close(10) = 0
  1484. 368 mprotect(0x7f453b02b000, 4096, PROT_READ) = 0
  1485. 368 open("/usr/lib/security/pam_nologin.so", O_RDONLY|O_CLOEXEC) = 10
  1486. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\t\0\0\0\0\0\0"..., 832) = 832
  1487. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=10240, ...}) = 0
  1488. 368 mmap(NULL, 2105488, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f453ac28000
  1489. 368 mprotect(0x7f453ac29000, 2097152, PROT_NONE) = 0
  1490. 368 mmap(0x7f453ae29000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x1000) = 0x7f453ae29000
  1491. 368 close(10) = 0
  1492. 368 mprotect(0x7f453ae29000, 4096, PROT_READ) = 0
  1493. 368 open("/etc/pam.d/system-auth", O_RDONLY) = 10
  1494. 368 fstat(10, {st_mode=S_IFREG|0644, st_size=441, ...}) = 0
  1495. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8c000
  1496. 368 read(10, "#%PAM-1.0\n\nauth required p"..., 4096) = 441
  1497. 368 open("/usr/lib/security/pam_unix.so", O_RDONLY|O_CLOEXEC) = 11
  1498. 368 read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200&\0\0\0\0\0\0"..., 832) = 832
  1499. 368 fstat(11, {st_mode=S_IFREG|0755, st_size=51952, ...}) = 0
  1500. 368 mmap(NULL, 2196352, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 11, 0) = 0x7f453aa0f000
  1501. 368 mprotect(0x7f453aa1b000, 2093056, PROT_NONE) = 0
  1502. 368 mmap(0x7f453ac1a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0xb000) = 0x7f453ac1a000
  1503. 368 mmap(0x7f453ac1c000, 45952, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453ac1c000
  1504. 368 close(11) = 0
  1505. 368 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 11
  1506. 368 fstat(11, {st_mode=S_IFREG|0644, st_size=26499, ...}) = 0
  1507. 368 mmap(NULL, 26499, PROT_READ, MAP_PRIVATE, 11, 0) = 0x7f453d928000
  1508. 368 close(11) = 0
  1509. 368 open("/usr/lib/libnsl.so.1", O_RDONLY|O_CLOEXEC) = 11
  1510. 368 read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360@\0\0\0\0\0\0"..., 832) = 832
  1511. 368 fstat(11, {st_mode=S_IFREG|0755, st_size=89016, ...}) = 0
  1512. 368 mmap(NULL, 2194072, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 11, 0) = 0x7f453a7f7000
  1513. 368 mprotect(0x7f453a80c000, 2093056, PROT_NONE) = 0
  1514. 368 mmap(0x7f453aa0b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x14000) = 0x7f453aa0b000
  1515. 368 mmap(0x7f453aa0d000, 6808, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453aa0d000
  1516. 368 close(11) = 0
  1517. 368 open("/usr/lib/libtirpc.so.3", O_RDONLY|O_CLOEXEC) = 11
  1518. 368 read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\223\0\0\0\0\0\0"..., 832) = 832
  1519. 368 fstat(11, {st_mode=S_IFREG|0755, st_size=193328, ...}) = 0
  1520. 368 mmap(NULL, 2291720, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 11, 0) = 0x7f453a5c7000
  1521. 368 mprotect(0x7f453a5f5000, 2093056, PROT_NONE) = 0
  1522. 368 mmap(0x7f453a7f4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x2d000) = 0x7f453a7f4000
  1523. 368 mmap(0x7f453a7f6000, 2056, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f453a7f6000
  1524. 368 close(11) = 0
  1525. 368 mprotect(0x7f453a7f4000, 4096, PROT_READ) = 0
  1526. 368 mprotect(0x7f453aa0b000, 4096, PROT_READ) = 0
  1527. 368 mprotect(0x7f453ac1a000, 4096, PROT_READ) = 0
  1528. 368 munmap(0x7f453d928000, 26499) = 0
  1529. 368 open("/usr/lib/security/pam_permit.so", O_RDONLY|O_CLOEXEC) = 11
  1530. 368 read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@\7\0\0\0\0\0\0"..., 832) = 832
  1531. 368 fstat(11, {st_mode=S_IFREG|0755, st_size=6080, ...}) = 0
  1532. 368 mmap(NULL, 2101328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 11, 0) = 0x7f453a3c5000
  1533. 368 mprotect(0x7f453a3c6000, 2093056, PROT_NONE) = 0
  1534. 368 mmap(0x7f453a5c5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0) = 0x7f453a5c5000
  1535. 368 close(11) = 0
  1536. 368 mprotect(0x7f453a5c5000, 4096, PROT_READ) = 0
  1537. 368 open("/usr/lib/security/pam_env.so", O_RDONLY|O_CLOEXEC) = 11
  1538. 368 read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260\r\0\0\0\0\0\0"..., 832) = 832
  1539. 368 fstat(11, {st_mode=S_IFREG|0755, st_size=14424, ...}) = 0
  1540. 368 mmap(NULL, 2109672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 11, 0) = 0x7f453a1c1000
  1541. 368 mprotect(0x7f453a1c4000, 2093056, PROT_NONE) = 0
  1542. 368 mmap(0x7f453a3c3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x2000) = 0x7f453a3c3000
  1543. 368 close(11) = 0
  1544. 368 mprotect(0x7f453a3c3000, 4096, PROT_READ) = 0
  1545. 368 read(10, "", 4096) = 0
  1546. 368 close(10) = 0
  1547. 368 munmap(0x7f453da8c000, 4096) = 0
  1548. 368 read(9, "", 4096) = 0
  1549. 368 close(9) = 0
  1550. 368 munmap(0x7f453da8d000, 4096) = 0
  1551. 368 read(8, "", 4096) = 0
  1552. 368 close(8) = 0
  1553. 368 munmap(0x7f453da8e000, 4096) = 0
  1554. 368 open("/etc/pam.d/system-remote-login", O_RDONLY) = 8
  1555. 368 fstat(8, {st_mode=S_IFREG|0644, st_size=143, ...}) = 0
  1556. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8e000
  1557. 368 read(8, "#%PAM-1.0\n\nauth include s"..., 4096) = 143
  1558. 368 open("/etc/pam.d/system-login", O_RDONLY) = 9
  1559. 368 fstat(9, {st_mode=S_IFREG|0644, st_size=619, ...}) = 0
  1560. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8d000
  1561. 368 read(9, "#%PAM-1.0\n\nauth required "..., 4096) = 619
  1562. 368 open("/usr/lib/security/pam_access.so", O_RDONLY|O_CLOEXEC) = 10
  1563. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\17\0\0\0\0\0\0"..., 832) = 832
  1564. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=18584, ...}) = 0
  1565. 368 mmap(NULL, 2113832, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4539fbc000
  1566. 368 mprotect(0x7f4539fbf000, 2097152, PROT_NONE) = 0
  1567. 368 mmap(0x7f453a1bf000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x3000) = 0x7f453a1bf000
  1568. 368 close(10) = 0
  1569. 368 mprotect(0x7f453a1bf000, 4096, PROT_READ) = 0
  1570. 368 open("/etc/pam.d/system-auth", O_RDONLY) = 10
  1571. 368 fstat(10, {st_mode=S_IFREG|0644, st_size=441, ...}) = 0
  1572. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8c000
  1573. 368 read(10, "#%PAM-1.0\n\nauth required p"..., 4096) = 441
  1574. 368 open("/usr/lib/security/pam_time.so", O_RDONLY|O_CLOEXEC) = 11
  1575. 368 read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200\f\0\0\0\0\0\0"..., 832) = 832
  1576. 368 fstat(11, {st_mode=S_IFREG|0755, st_size=14480, ...}) = 0
  1577. 368 mmap(NULL, 2109656, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 11, 0) = 0x7f4539db8000
  1578. 368 mprotect(0x7f4539dbb000, 2093056, PROT_NONE) = 0
  1579. 368 mmap(0x7f4539fba000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x2000) = 0x7f4539fba000
  1580. 368 close(11) = 0
  1581. 368 mprotect(0x7f4539fba000, 4096, PROT_READ) = 0
  1582. 368 read(10, "", 4096) = 0
  1583. 368 close(10) = 0
  1584. 368 munmap(0x7f453da8c000, 4096) = 0
  1585. 368 read(9, "", 4096) = 0
  1586. 368 close(9) = 0
  1587. 368 munmap(0x7f453da8d000, 4096) = 0
  1588. 368 read(8, "", 4096) = 0
  1589. 368 close(8) = 0
  1590. 368 munmap(0x7f453da8e000, 4096) = 0
  1591. 368 open("/etc/pam.d/system-remote-login", O_RDONLY) = 8
  1592. 368 fstat(8, {st_mode=S_IFREG|0644, st_size=143, ...}) = 0
  1593. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8e000
  1594. 368 read(8, "#%PAM-1.0\n\nauth include s"..., 4096) = 143
  1595. 368 open("/etc/pam.d/system-login", O_RDONLY) = 9
  1596. 368 fstat(9, {st_mode=S_IFREG|0644, st_size=619, ...}) = 0
  1597. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8d000
  1598. 368 read(9, "#%PAM-1.0\n\nauth required "..., 4096) = 619
  1599. 368 open("/etc/pam.d/system-auth", O_RDONLY) = 10
  1600. 368 fstat(10, {st_mode=S_IFREG|0644, st_size=441, ...}) = 0
  1601. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8c000
  1602. 368 read(10, "#%PAM-1.0\n\nauth required p"..., 4096) = 441
  1603. 368 read(10, "", 4096) = 0
  1604. 368 close(10) = 0
  1605. 368 munmap(0x7f453da8c000, 4096) = 0
  1606. 368 read(9, "", 4096) = 0
  1607. 368 close(9) = 0
  1608. 368 munmap(0x7f453da8d000, 4096) = 0
  1609. 368 read(8, "", 4096) = 0
  1610. 368 close(8) = 0
  1611. 368 munmap(0x7f453da8e000, 4096) = 0
  1612. 368 open("/etc/pam.d/system-remote-login", O_RDONLY) = 8
  1613. 368 fstat(8, {st_mode=S_IFREG|0644, st_size=143, ...}) = 0
  1614. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8e000
  1615. 368 read(8, "#%PAM-1.0\n\nauth include s"..., 4096) = 143
  1616. 368 open("/etc/pam.d/system-login", O_RDONLY) = 9
  1617. 368 fstat(9, {st_mode=S_IFREG|0644, st_size=619, ...}) = 0
  1618. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8d000
  1619. 368 read(9, "#%PAM-1.0\n\nauth required "..., 4096) = 619
  1620. 368 open("/usr/lib/security/pam_loginuid.so", O_RDONLY|O_CLOEXEC) = 10
  1621. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 \n\0\0\0\0\0\0"..., 832) = 832
  1622. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=10256, ...}) = 0
  1623. 368 mmap(NULL, 2105504, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4539bb5000
  1624. 368 mprotect(0x7f4539bb6000, 2097152, PROT_NONE) = 0
  1625. 368 mmap(0x7f4539db6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x1000) = 0x7f4539db6000
  1626. 368 close(10) = 0
  1627. 368 mprotect(0x7f4539db6000, 4096, PROT_READ) = 0
  1628. 368 open("/etc/pam.d/system-auth", O_RDONLY) = 10
  1629. 368 fstat(10, {st_mode=S_IFREG|0644, st_size=441, ...}) = 0
  1630. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8c000
  1631. 368 read(10, "#%PAM-1.0\n\nauth required p"..., 4096) = 441
  1632. 368 open("/usr/lib/security/pam_limits.so", O_RDONLY|O_CLOEXEC) = 11
  1633. 368 read(11, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\23\0\0\0\0\0\0"..., 832) = 832
  1634. 368 fstat(11, {st_mode=S_IFREG|0755, st_size=18704, ...}) = 0
  1635. 368 mmap(NULL, 2113880, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 11, 0) = 0x7f45399b0000
  1636. 368 mprotect(0x7f45399b4000, 2093056, PROT_NONE) = 0
  1637. 368 mmap(0x7f4539bb3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 11, 0x3000) = 0x7f4539bb3000
  1638. 368 close(11) = 0
  1639. 368 mprotect(0x7f4539bb3000, 4096, PROT_READ) = 0
  1640. 368 read(10, "", 4096) = 0
  1641. 368 close(10) = 0
  1642. 368 munmap(0x7f453da8c000, 4096) = 0
  1643. 368 open("/usr/lib/security/pam_motd.so", O_RDONLY|O_CLOEXEC) = 10
  1644. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\10\0\0\0\0\0\0"..., 832) = 832
  1645. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=6136, ...}) = 0
  1646. 368 mmap(NULL, 2101384, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f45397ae000
  1647. 368 mprotect(0x7f45397af000, 2093056, PROT_NONE) = 0
  1648. 368 mmap(0x7f45399ae000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0) = 0x7f45399ae000
  1649. 368 close(10) = 0
  1650. 368 mprotect(0x7f45399ae000, 4096, PROT_READ) = 0
  1651. 368 open("/usr/lib/security/pam_mail.so", O_RDONLY|O_CLOEXEC) = 10
  1652. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\v\0\0\0\0\0\0"..., 832) = 832
  1653. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=10288, ...}) = 0
  1654. 368 mmap(NULL, 2105536, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f45395ab000
  1655. 368 mprotect(0x7f45395ad000, 2093056, PROT_NONE) = 0
  1656. 368 mmap(0x7f45397ac000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x1000) = 0x7f45397ac000
  1657. 368 close(10) = 0
  1658. 368 mprotect(0x7f45397ac000, 4096, PROT_READ) = 0
  1659. 368 open("/usr/lib/security/pam_systemd.so", O_RDONLY|O_CLOEXEC) = 10
  1660. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1661. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=274312, ...}) = 0
  1662. 368 mmap(NULL, 277953, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f453d8eb000
  1663. 368 mmap(0x7f453d92b000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x3f000) = 0x7f453d92b000
  1664. 368 close(10) = 0
  1665. 368 open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 10
  1666. 368 fstat(10, {st_mode=S_IFREG|0644, st_size=26499, ...}) = 0
  1667. 368 mmap(NULL, 26499, PROT_READ, MAP_PRIVATE, 10, 0) = 0x7f453d8e4000
  1668. 368 close(10) = 0
  1669. 368 open("/usr/lib/libcap.so.2", O_RDONLY|O_CLOEXEC) = 10
  1670. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240\25\0\0\0\0\0\0"..., 832) = 832
  1671. 368 fstat(10, {st_mode=S_IFREG|0644, st_size=17320, ...}) = 0
  1672. 368 mmap(NULL, 2112568, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f45393a7000
  1673. 368 mprotect(0x7f45393ab000, 2093056, PROT_NONE) = 0
  1674. 368 mmap(0x7f45395aa000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x3000) = 0x7f45395aa000
  1675. 368 close(10) = 0
  1676. 368 open("/usr/lib/librt.so.1", O_RDONLY|O_CLOEXEC) = 10
  1677. 368 read(10, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240!\0\0\0\0\0\0"..., 832) = 832
  1678. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=31672, ...}) = 0
  1679. 368 mmap(NULL, 2128856, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f453919f000
  1680. 368 mprotect(0x7f45391a6000, 2093056, PROT_NONE) = 0
  1681. 368 mmap(0x7f45393a5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x6000) = 0x7f45393a5000
  1682. 368 close(10) = 0
  1683. 368 open("/usr/lib/libm.so.6", O_RDONLY|O_CLOEXEC) = 10
  1684. 368 read(10, "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20U\0\0\0\0\0\0"..., 832) = 832
  1685. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=1038688, ...}) = 0
  1686. 368 mmap(NULL, 3133720, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4538ea1000
  1687. 368 mprotect(0x7f4538f9e000, 2093056, PROT_NONE) = 0
  1688. 368 mmap(0x7f453919d000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0xfc000) = 0x7f453919d000
  1689. 368 close(10) = 0
  1690. 368 open("/usr/lib/liblzma.so.5", O_RDONLY|O_CLOEXEC) = 10
  1691. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\2001\0\0\0\0\0\0"..., 832) = 832
  1692. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=154264, ...}) = 0
  1693. 368 mmap(NULL, 2249360, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4538c7b000
  1694. 368 mprotect(0x7f4538ca0000, 2093056, PROT_NONE) = 0
  1695. 368 mmap(0x7f4538e9f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x24000) = 0x7f4538e9f000
  1696. 368 close(10) = 0
  1697. 368 open("/usr/lib/liblz4.so.1", O_RDONLY|O_CLOEXEC) = 10
  1698. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300$\0\0\0\0\0\0"..., 832) = 832
  1699. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=71968, ...}) = 0
  1700. 368 mmap(NULL, 2167144, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4538a69000
  1701. 368 mprotect(0x7f4538a7a000, 2093056, PROT_NONE) = 0
  1702. 368 mmap(0x7f4538c79000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x10000) = 0x7f4538c79000
  1703. 368 close(10) = 0
  1704. 368 open("/usr/lib/libgcrypt.so.20", O_RDONLY|O_CLOEXEC) = 10
  1705. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\221\0\0\0\0\0\0"..., 832) = 832
  1706. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=923160, ...}) = 0
  1707. 368 mmap(NULL, 3019456, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4538787000
  1708. 368 mprotect(0x7f453885f000, 2097152, PROT_NONE) = 0
  1709. 368 mmap(0x7f4538a5f000, 36864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0xd8000) = 0x7f4538a5f000
  1710. 368 mmap(0x7f4538a68000, 704, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4538a68000
  1711. 368 close(10) = 0
  1712. 368 open("/usr/lib/libgpg-error.so.0", O_RDONLY|O_CLOEXEC) = 10
  1713. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20)\0\0\0\0\0\0"..., 832) = 832
  1714. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=76320, ...}) = 0
  1715. 368 mmap(NULL, 2171480, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4538574000
  1716. 368 mprotect(0x7f4538586000, 2093056, PROT_NONE) = 0
  1717. 368 mmap(0x7f4538785000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x11000) = 0x7f4538785000
  1718. 368 close(10) = 0
  1719. 368 open("/usr/lib/libacl.so.1", O_RDONLY|O_CLOEXEC) = 10
  1720. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300 \0\0\0\0\0\0"..., 832) = 832
  1721. 368 fstat(10, {st_mode=S_IFREG|0644, st_size=35384, ...}) = 0
  1722. 368 mmap(NULL, 2130592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f453836b000
  1723. 368 mprotect(0x7f4538373000, 2093056, PROT_NONE) = 0
  1724. 368 mmap(0x7f4538572000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x7000) = 0x7f4538572000
  1725. 368 close(10) = 0
  1726. 368 open("/usr/lib/libidn.so.11", O_RDONLY|O_CLOEXEC) = 10
  1727. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\00001\0\0\0\0\0\0"..., 832) = 832
  1728. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=211432, ...}) = 0
  1729. 368 mmap(NULL, 2306528, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4538137000
  1730. 368 mprotect(0x7f4538169000, 2097152, PROT_NONE) = 0
  1731. 368 mmap(0x7f4538369000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x32000) = 0x7f4538369000
  1732. 368 close(10) = 0
  1733. 368 open("/usr/lib/libseccomp.so.2", O_RDONLY|O_CLOEXEC) = 10
  1734. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200C\1\0\0\0\0\0"..., 832) = 832
  1735. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=178352, ...}) = 0
  1736. 368 mmap(NULL, 2273528, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4537f0b000
  1737. 368 mprotect(0x7f4537f29000, 2097152, PROT_NONE) = 0
  1738. 368 mmap(0x7f4538129000, 57344, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x1e000) = 0x7f4538129000
  1739. 368 close(10) = 0
  1740. 368 open("/usr/lib/libpam_misc.so.0", O_RDONLY|O_CLOEXEC) = 10
  1741. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\20\0\0\0\0\0\0"..., 832) = 832
  1742. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=14552, ...}) = 0
  1743. 368 mmap(NULL, 2109760, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4537d07000
  1744. 368 mprotect(0x7f4537d0a000, 2093056, PROT_NONE) = 0
  1745. 368 mmap(0x7f4537f09000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x2000) = 0x7f4537f09000
  1746. 368 close(10) = 0
  1747. 368 open("/usr/lib/libattr.so.1", O_RDONLY|O_CLOEXEC) = 10
  1748. 368 read(10, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\24\0\0\0\0\0\0"..., 832) = 832
  1749. 368 fstat(10, {st_mode=S_IFREG|0755, st_size=18736, ...}) = 0
  1750. 368 mmap(NULL, 2113912, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 10, 0) = 0x7f4537b02000
  1751. 368 mprotect(0x7f4537b06000, 2093056, PROT_NONE) = 0
  1752. 368 mmap(0x7f4537d05000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 10, 0x3000) = 0x7f4537d05000
  1753. 368 close(10) = 0
  1754. 368 mprotect(0x7f4537d05000, 4096, PROT_READ) = 0
  1755. 368 mprotect(0x7f4537f09000, 4096, PROT_READ) = 0
  1756. 368 mprotect(0x7f4538129000, 53248, PROT_READ) = 0
  1757. 368 mprotect(0x7f4538369000, 4096, PROT_READ) = 0
  1758. 368 mprotect(0x7f4538572000, 4096, PROT_READ) = 0
  1759. 368 mprotect(0x7f4538785000, 4096, PROT_READ) = 0
  1760. 368 mprotect(0x7f4538a5f000, 4096, PROT_READ) = 0
  1761. 368 mprotect(0x7f4538c79000, 4096, PROT_READ) = 0
  1762. 368 mprotect(0x7f4538e9f000, 4096, PROT_READ) = 0
  1763. 368 mprotect(0x7f453919d000, 4096, PROT_READ) = 0
  1764. 368 mprotect(0x7f45393a5000, 4096, PROT_READ) = 0
  1765. 368 mprotect(0x7f453d92b000, 12288, PROT_READ) = 0
  1766. 368 munmap(0x7f453d8e4000, 26499) = 0
  1767. 368 read(9, "", 4096) = 0
  1768. 368 close(9) = 0
  1769. 368 munmap(0x7f453da8d000, 4096) = 0
  1770. 368 read(8, "", 4096) = 0
  1771. 368 close(8) = 0
  1772. 368 munmap(0x7f453da8e000, 4096) = 0
  1773. 368 read(4, "", 4096) = 0
  1774. 368 close(4) = 0
  1775. 368 munmap(0x7f453da8f000, 4096) = 0
  1776. 368 open("/etc/pam.d/other", O_RDONLY) = 4
  1777. 368 fstat(4, {st_mode=S_IFREG|0644, st_size=127, ...}) = 0
  1778. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  1779. 368 read(4, "#%PAM-1.0\nauth\t\trequired\tpam_uni"..., 4096) = 127
  1780. 368 read(4, "", 4096) = 0
  1781. 368 close(4) = 0
  1782. 368 munmap(0x7f453da8f000, 4096) = 0
  1783. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1784. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1785. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 78, MSG_NOSIGNAL, NULL, 0) = 78
  1786. 368 close(4) = 0
  1787. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1788. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1789. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 68, MSG_NOSIGNAL, NULL, 0) = 68
  1790. 368 close(4) = 0
  1791. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1792. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1793. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 81, MSG_NOSIGNAL, NULL, 0) = 81
  1794. 368 close(4) = 0
  1795. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=6, revents=POLLIN}])
  1796. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1797. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1798. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 66, MSG_NOSIGNAL, NULL, 0) = 66
  1799. 368 close(4) = 0
  1800. 368 read(6, "\0\0\0\27", 4) = 4
  1801. 368 read(6, "\4\0\0\0\16ssh-connection\0\0\0\0", 23) = 23
  1802. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1803. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1804. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 71, MSG_NOSIGNAL, NULL, 0) = 71
  1805. 368 close(4) = 0
  1806. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1807. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1808. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 89, MSG_NOSIGNAL, NULL, 0) = 89
  1809. 368 close(4) = 0
  1810. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1811. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1812. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 79, MSG_NOSIGNAL, NULL, 0) = 79
  1813. 368 close(4) = 0
  1814. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  1815. 369 <... select resumed> ) = 1 (in [3])
  1816. 369 read(3, "\0\0\1`\322~\336P\327\221\267\204,+p,%\301*\33\377\244-d\20\320\365p?2\3113"..., 8192) = 364
  1817. 369 write(8, "\0\0\0N\0\0\0\5\0\0\0Fuserauth-request for"..., 82) = 82
  1818. 368 <... poll resumed> ) = 1 ([{fd=7, revents=POLLIN}])
  1819. 369 write(8, "\0\0\0\34\0\0\0\5\0\0\0\24attempt 1 failures 0", 32 <unfinished ...>
  1820. 368 read(7, <unfinished ...>
  1821. 369 <... write resumed> ) = 32
  1822. 368 <... read resumed> "\0\0\0N", 4) = 4
  1823. 369 write(8, "\0\0\0004\0\0\0\6\0\0\0,input_userauth_reque"..., 56 <unfinished ...>
  1824. 368 read(7, <unfinished ...>
  1825. 369 <... write resumed> ) = 56
  1826. 368 <... read resumed> "\0\0\0\5\0\0\0Fuserauth-request for use"..., 78) = 78
  1827. 369 write(8, "\0\0\0000\0\0\0\5\0\0\0(test whether pkalg/p"..., 52 <unfinished ...>
  1828. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  1829. 369 <... write resumed> ) = 52
  1830. 368 <... socket resumed> ) = 4
  1831. 369 write(8, "\0\0\0\37\0\0\0\7\0\0\0\27mm_key_allowed enter"..., 35 <unfinished ...>
  1832. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110 <unfinished ...>
  1833. 369 <... write resumed> ) = 35
  1834. 368 <... connect resumed> ) = 0
  1835. 369 write(8, "\0\0\0)\0\0\0\7\0\0\0!mm_request_send ente"..., 45 <unfinished ...>
  1836. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 119, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  1837. 369 <... write resumed> ) = 45
  1838. 369 write(4, "\0\0\1,\26", 5 <unfinished ...>
  1839. 368 <... sendto resumed> ) = 119
  1840. 369 <... write resumed> ) = 5
  1841. 368 close(4 <unfinished ...>
  1842. 369 write(4, "\0\0\0\2\0\0\0\0\0\0\0\0\0\0\1\27\0\0\0\7ssh-rsa\0\0\0\3\1"..., 299 <unfinished ...>
  1843. 368 <... close resumed> ) = 0
  1844. 369 <... write resumed> ) = 299
  1845. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  1846. 369 write(8, "\0\0\0:\0\0\0\7\0\0\0002mm_key_allowed: wait"..., 62 <unfinished ...>
  1847. 368 <... poll resumed> ) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1848. 369 <... write resumed> ) = 62
  1849. 368 read(7, <unfinished ...>
  1850. 369 write(8, "\0\0\0003\0\0\0\7\0\0\0+mm_request_receive_e"..., 55 <unfinished ...>
  1851. 368 <... read resumed> "\0\0\0\34", 4) = 4
  1852. 369 <... write resumed> ) = 55
  1853. 368 read(7, <unfinished ...>
  1854. 369 write(8, "\0\0\0#\0\0\0\7\0\0\0\33mm_request_receive e"..., 39 <unfinished ...>
  1855. 368 <... read resumed> "\0\0\0\5\0\0\0\24attempt 1 failures 0", 28) = 28
  1856. 369 <... write resumed> ) = 39
  1857. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  1858. 369 read(4, <unfinished ...>
  1859. 368 <... socket resumed> ) = 4
  1860. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1861. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 69, MSG_NOSIGNAL, NULL, 0) = 69
  1862. 368 close(4) = 0
  1863. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1864. 368 read(7, "\0\0\0004", 4) = 4
  1865. 368 read(7, "\0\0\0\6\0\0\0,input_userauth_request: "..., 52) = 52
  1866. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1867. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1868. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 93, MSG_NOSIGNAL, NULL, 0) = 93
  1869. 368 close(4) = 0
  1870. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1871. 368 read(7, "\0\0\0000", 4) = 4
  1872. 368 read(7, "\0\0\0\5\0\0\0(test whether pkalg/pkblo"..., 48) = 48
  1873. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1874. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1875. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 89, MSG_NOSIGNAL, NULL, 0) = 89
  1876. 368 close(4) = 0
  1877. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1878. 368 read(7, "\0\0\0\37", 4) = 4
  1879. 368 read(7, "\0\0\0\7\0\0\0\27mm_key_allowed entering", 31) = 31
  1880. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1881. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1882. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 72, MSG_NOSIGNAL, NULL, 0) = 72
  1883. 368 close(4) = 0
  1884. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1885. 368 read(7, "\0\0\0)", 4) = 4
  1886. 368 read(7, "\0\0\0\7\0\0\0!mm_request_send entering"..., 41) = 41
  1887. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1888. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1889. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 82, MSG_NOSIGNAL, NULL, 0) = 82
  1890. 368 close(4) = 0
  1891. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1892. 368 read(7, "\0\0\0:", 4) = 4
  1893. 368 read(7, "\0\0\0\7\0\0\0002mm_key_allowed: waiting "..., 58) = 58
  1894. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1895. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1896. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 99, MSG_NOSIGNAL, NULL, 0) = 99
  1897. 368 close(4) = 0
  1898. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1899. 368 read(7, "\0\0\0003", 4) = 4
  1900. 368 read(7, "\0\0\0\7\0\0\0+mm_request_receive_expec"..., 51) = 51
  1901. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1902. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1903. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 92, MSG_NOSIGNAL, NULL, 0) = 92
  1904. 368 close(4) = 0
  1905. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN}, {fd=7, revents=POLLIN}])
  1906. 368 read(7, "\0\0\0#", 4) = 4
  1907. 368 read(7, "\0\0\0\7\0\0\0\33mm_request_receive enter"..., 35) = 35
  1908. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1909. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1910. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 76, MSG_NOSIGNAL, NULL, 0) = 76
  1911. 368 close(4) = 0
  1912. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=6, revents=POLLIN}])
  1913. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1914. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1915. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 66, MSG_NOSIGNAL, NULL, 0) = 66
  1916. 368 close(4) = 0
  1917. 368 read(6, "\0\0\1,", 4) = 4
  1918. 368 read(6, "\26\0\0\0\2\0\0\0\0\0\0\0\0\0\0\1\27\0\0\0\7ssh-rsa\0\0\0\3"..., 300) = 300
  1919. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1920. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1921. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 72, MSG_NOSIGNAL, NULL, 0) = 72
  1922. 368 close(4) = 0
  1923. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1924. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1925. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 68, MSG_NOSIGNAL, NULL, 0) = 68
  1926. 368 close(4) = 0
  1927. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1928. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1929. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 90, MSG_NOSIGNAL, NULL, 0) = 90
  1930. 368 close(4) = 0
  1931. 368 geteuid() = 0
  1932. 368 getegid() = 0
  1933. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  1934. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  1935. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 71, MSG_NOSIGNAL, NULL, 0) = 71
  1936. 368 close(4) = 0
  1937. 368 getgroups(0, NULL) = 0
  1938. 368 open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 4
  1939. 368 read(4, "65536\n", 31) = 6
  1940. 368 close(4) = 0
  1941. 368 socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  1942. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  1943. 368 close(4) = 0
  1944. 368 socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  1945. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  1946. 368 close(4) = 0
  1947. 368 open("/etc/group", O_RDONLY|O_CLOEXEC) = 4
  1948. 368 lseek(4, 0, SEEK_CUR) = 0
  1949. 368 fstat(4, {st_mode=S_IFREG|0644, st_size=735, ...}) = 0
  1950. 368 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f453da8f000
  1951. 368 read(4, "root:x:0:root\nbin:x:1:root,bin,d"..., 4096) = 735
  1952. 368 lseek(4, 0, SEEK_CUR) = 735
  1953. 368 lseek(4, 0, SEEK_CUR) = 735
  1954. 368 lseek(4, 0, SEEK_CUR) = 735
  1955. 368 lseek(4, 0, SEEK_CUR) = 735
  1956. 368 lseek(4, 0, SEEK_CUR) = 735
  1957. 368 lseek(4, 0, SEEK_CUR) = 735
  1958. 368 lseek(4, 0, SEEK_CUR) = 735
  1959. 368 lseek(4, 0, SEEK_CUR) = 735
  1960. 368 lseek(4, 0, SEEK_CUR) = 735
  1961. 368 lseek(4, 0, SEEK_CUR) = 735
  1962. 368 lseek(4, 0, SEEK_CUR) = 735
  1963. 368 lseek(4, 0, SEEK_CUR) = 735
  1964. 368 lseek(4, 0, SEEK_CUR) = 735
  1965. 368 lseek(4, 0, SEEK_CUR) = 735
  1966. 368 lseek(4, 0, SEEK_CUR) = 735
  1967. 368 lseek(4, 0, SEEK_CUR) = 735
  1968. 368 lseek(4, 0, SEEK_CUR) = 735
  1969. 368 lseek(4, 0, SEEK_CUR) = 735
  1970. 368 lseek(4, 0, SEEK_CUR) = 735
  1971. 368 lseek(4, 0, SEEK_CUR) = 735
  1972. 368 lseek(4, 0, SEEK_CUR) = 735
  1973. 368 lseek(4, 0, SEEK_CUR) = 735
  1974. 368 lseek(4, 0, SEEK_CUR) = 735
  1975. 368 lseek(4, 0, SEEK_CUR) = 735
  1976. 368 lseek(4, 0, SEEK_CUR) = 735
  1977. 368 lseek(4, 0, SEEK_CUR) = 735
  1978. 368 lseek(4, 0, SEEK_CUR) = 735
  1979. 368 lseek(4, 0, SEEK_CUR) = 735
  1980. 368 lseek(4, 0, SEEK_CUR) = 735
  1981. 368 lseek(4, 0, SEEK_CUR) = 735
  1982. 368 lseek(4, 0, SEEK_CUR) = 735
  1983. 368 lseek(4, 0, SEEK_CUR) = 735
  1984. 368 lseek(4, 0, SEEK_CUR) = 735
  1985. 368 lseek(4, 0, SEEK_CUR) = 735
  1986. 368 lseek(4, 0, SEEK_CUR) = 735
  1987. 368 lseek(4, 0, SEEK_CUR) = 735
  1988. 368 lseek(4, 0, SEEK_CUR) = 735
  1989. 368 lseek(4, 0, SEEK_CUR) = 735
  1990. 368 lseek(4, 0, SEEK_CUR) = 735
  1991. 368 lseek(4, 0, SEEK_CUR) = 735
  1992. 368 lseek(4, 0, SEEK_CUR) = 735
  1993. 368 lseek(4, 0, SEEK_CUR) = 735
  1994. 368 lseek(4, 0, SEEK_CUR) = 735
  1995. 368 lseek(4, 0, SEEK_CUR) = 735
  1996. 368 lseek(4, 0, SEEK_CUR) = 735
  1997. 368 lseek(4, 0, SEEK_CUR) = 735
  1998. 368 read(4, "", 4096) = 0
  1999. 368 close(4) = 0
  2000. 368 munmap(0x7f453da8f000, 4096) = 0
  2001. 368 setgroups(8, [0, 1, 2, 3, 4, 6, 10, 19]) = 0
  2002. 368 getgroups(0, NULL) = 8
  2003. 368 getgroups(8, [0, 1, 2, 3, 4, 6, 10, 19]) = 8
  2004. 368 setgroups(8, [0, 1, 2, 3, 4, 6, 10, 19]) = 0
  2005. 368 setresgid(-1, 0, -1) = 0
  2006. 368 setresuid(-1, 0, -1) = 0
  2007. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2008. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2009. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 88, MSG_NOSIGNAL, NULL, 0) = 88
  2010. 368 close(4) = 0
  2011. 368 open("/root/.ssh/authorized_keys", O_RDONLY|O_NONBLOCK) = -1 ENOENT (No such file or directory)
  2012. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2013. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2014. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 125, MSG_NOSIGNAL, NULL, 0) = 125
  2015. 368 close(4) = 0
  2016. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2017. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2018. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 55, MSG_NOSIGNAL, NULL, 0) = 55
  2019. 368 close(4) = 0
  2020. 368 setresuid(-1, 0, -1) = 0
  2021. 368 setresgid(-1, 0, -1) = 0
  2022. 368 setgroups(0, []) = 0
  2023. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2024. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2025. 368 sendto(4, "<38>Nov 28 18:31:24 sshd[368]: F"..., 145, MSG_NOSIGNAL, NULL, 0) = 145
  2026. 368 close(4) = 0
  2027. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2028. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2029. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 94, MSG_NOSIGNAL, NULL, 0) = 94
  2030. 368 close(4) = 0
  2031. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2032. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2033. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 72, MSG_NOSIGNAL, NULL, 0) = 72
  2034. 368 close(4) = 0
  2035. 368 write(6, "\0\0\0\t\27", 5 <unfinished ...>
  2036. 369 <... read resumed> "\0\0\0\t", 4) = 4
  2037. 368 <... write resumed> ) = 5
  2038. 369 read(4, <unfinished ...>
  2039. 368 write(6, "\0\0\0\0\0\0\0\0", 8 <unfinished ...>
  2040. 369 <... read resumed> "\27", 9) = 1
  2041. 368 <... write resumed> ) = 8
  2042. 369 read(4, <unfinished ...>
  2043. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  2044. 369 <... read resumed> "\0\0\0\0\0\0\0\0", 8) = 8
  2045. 369 write(8, "\0\0\0006\0\0\0\6\0\0\0.userauth_pubkey: aut"..., 58) = 58
  2046. 368 <... poll resumed> ) = 1 ([{fd=7, revents=POLLIN}])
  2047. 369 write(8, "\0\0\0L\0\0\0\7\0\0\0Duserauth_finish: fai"..., 80 <unfinished ...>
  2048. 368 read(7, <unfinished ...>
  2049. 369 <... write resumed> ) = 80
  2050. 368 <... read resumed> "\0\0\0006", 4) = 4
  2051. 369 write(3, "\0\0\0 W\371\244V\5\363(\241KX\327\5\314\2%f\235\210\"\350\373\371\252s\35\365\207z"..., 44 <unfinished ...>
  2052. 368 read(7, <unfinished ...>
  2053. 369 <... write resumed> ) = 44
  2054. 368 <... read resumed> "\0\0\0\6\0\0\0.userauth_pubkey: authent"..., 54) = 54
  2055. 369 select(4, [3], NULL, NULL, NULL <unfinished ...>
  2056. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2057. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2058. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 95, MSG_NOSIGNAL, NULL, 0) = 95
  2059. 368 close(4) = 0
  2060. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 1 ([{fd=7, revents=POLLIN}])
  2061. 368 read(7, "\0\0\0L", 4) = 4
  2062. 368 read(7, "\0\0\0\7\0\0\0Duserauth_finish: failure"..., 76) = 76
  2063. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2064. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2065. 368 sendto(4, "<39>Nov 28 18:31:24 sshd[368]: d"..., 117, MSG_NOSIGNAL, NULL, 0) = 117
  2066. 368 close(4) = 0
  2067. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295 <unfinished ...>
  2068. 369 <... select resumed> ) = 1 (in [3])
  2069. 369 read(3, "", 8192) = 0
  2070. 369 write(8, "\0\0\0(\0\0\0\3\0\0\0 Connection closed by"..., 44) = 44
  2071. 368 <... poll resumed> ) = 1 ([{fd=7, revents=POLLIN}])
  2072. 369 write(8, "\0\0\0\22\0\0\0\5\0\0\0\ndo_cleanup", 22 <unfinished ...>
  2073. 368 read(7, <unfinished ...>
  2074. 369 <... write resumed> ) = 22
  2075. 368 <... read resumed> "\0\0\0(", 4) = 4
  2076. 369 write(8, "\0\0\0+\0\0\0\7\0\0\0#PAM: sshpam_thread_c"..., 47 <unfinished ...>
  2077. 368 read(7, <unfinished ...>
  2078. 369 <... write resumed> ) = 47
  2079. 368 <... read resumed> "\0\0\0\3\0\0\0 Connection closed by 37."..., 40) = 40
  2080. 369 exit_group(255) = ?
  2081. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0 <unfinished ...>
  2082. 369 +++ exited with 255 +++
  2083. 368 <... socket resumed> ) = 4
  2084. 368 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=369, si_uid=99, si_status=255, si_utime=1, si_stime=0} ---
  2085. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2086. 368 sendto(4, "<38>Nov 28 18:31:26 sshd[368]: C"..., 73, MSG_NOSIGNAL, NULL, 0) = 73
  2087. 368 close(4) = 0
  2088. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN|POLLHUP}, {fd=7, revents=POLLIN|POLLHUP}])
  2089. 368 read(7, "\0\0\0\22", 4) = 4
  2090. 368 read(7, "\0\0\0\5\0\0\0\ndo_cleanup", 18) = 18
  2091. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2092. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2093. 368 sendto(4, "<39>Nov 28 18:31:26 sshd[368]: d"..., 59, MSG_NOSIGNAL, NULL, 0) = 59
  2094. 368 close(4) = 0
  2095. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN|POLLHUP}, {fd=7, revents=POLLIN|POLLHUP}])
  2096. 368 read(7, "\0\0\0+", 4) = 4
  2097. 368 read(7, "\0\0\0\7\0\0\0#PAM: sshpam_thread_clean"..., 43) = 43
  2098. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2099. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2100. 368 sendto(4, "<39>Nov 28 18:31:26 sshd[368]: d"..., 84, MSG_NOSIGNAL, NULL, 0) = 84
  2101. 368 close(4) = 0
  2102. 368 poll([{fd=6, events=POLLIN}, {fd=7, events=POLLIN}], 2, 4294967295) = 2 ([{fd=6, revents=POLLIN|POLLHUP}, {fd=7, revents=POLLHUP}])
  2103. 368 read(7, "", 4) = 0
  2104. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2105. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2106. 368 sendto(4, "<39>Nov 28 18:31:26 sshd[368]: d"..., 76, MSG_NOSIGNAL, NULL, 0) = 76
  2107. 368 close(4) = 0
  2108. 368 close(7) = 0
  2109. 368 poll([{fd=6, events=POLLIN}], 1, 4294967295) = 1 ([{fd=6, revents=POLLIN|POLLHUP}])
  2110. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2111. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2112. 368 sendto(4, "<39>Nov 28 18:31:26 sshd[368]: d"..., 66, MSG_NOSIGNAL, NULL, 0) = 66
  2113. 368 close(4) = 0
  2114. 368 read(6, "", 4) = 0
  2115. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2116. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2117. 368 sendto(4, "<39>Nov 28 18:31:26 sshd[368]: d"..., 49, MSG_NOSIGNAL, NULL, 0) = 49
  2118. 368 close(4) = 0
  2119. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2120. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2121. 368 sendto(4, "<39>Nov 28 18:31:26 sshd[368]: d"..., 51, MSG_NOSIGNAL, NULL, 0) = 51
  2122. 368 close(4) = 0
  2123. 368 munmap(0x7f453b02d000, 2109696) = 0
  2124. 368 munmap(0x7f453ae2b000, 2101376) = 0
  2125. 368 munmap(0x7f453ac28000, 2105488) = 0
  2126. 368 munmap(0x7f453aa0f000, 2196352) = 0
  2127. 368 munmap(0x7f453a3c5000, 2101328) = 0
  2128. 368 munmap(0x7f453a1c1000, 2109672) = 0
  2129. 368 munmap(0x7f4539fbc000, 2113832) = 0
  2130. 368 munmap(0x7f453a5c7000, 2291720) = 0
  2131. 368 munmap(0x7f453a7f7000, 2194072) = 0
  2132. 368 munmap(0x7f4539db8000, 2109656) = 0
  2133. 368 munmap(0x7f4539bb5000, 2105504) = 0
  2134. 368 munmap(0x7f45399b0000, 2113880) = 0
  2135. 368 munmap(0x7f45397ae000, 2101384) = 0
  2136. 368 munmap(0x7f45395ab000, 2105536) = 0
  2137. 368 munmap(0x7f453d8eb000, 277953) = 0
  2138. 368 munmap(0x7f45393a7000, 2112568) = 0
  2139. 368 munmap(0x7f4538ea1000, 3133720) = 0
  2140. 368 munmap(0x7f4538c7b000, 2249360) = 0
  2141. 368 munmap(0x7f4538a69000, 2167144) = 0
  2142. 368 munmap(0x7f4538787000, 3019456) = 0
  2143. 368 munmap(0x7f4538574000, 2171480) = 0
  2144. 368 munmap(0x7f453836b000, 2130592) = 0
  2145. 368 munmap(0x7f4538137000, 2306528) = 0
  2146. 368 munmap(0x7f4537f0b000, 2273528) = 0
  2147. 368 munmap(0x7f4537d07000, 2109760) = 0
  2148. 368 munmap(0x7f4537b02000, 2113912) = 0
  2149. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2150. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2151. 368 sendto(4, "<39>Nov 28 18:31:26 sshd[368]: d"..., 74, MSG_NOSIGNAL, NULL, 0) = 74
  2152. 368 close(4) = 0
  2153. 368 socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
  2154. 368 connect(4, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
  2155. 368 sendto(4, "<39>Nov 28 18:31:26 sshd[368]: d"..., 64, MSG_NOSIGNAL, NULL, 0) = 64
  2156. 368 close(4) = 0
  2157. 368 kill(369, SIGKILL) = 0
  2158. 368 exit_group(255) = ?
  2159. 368 +++ exited with 255 +++
  2160. 229 <... select resumed> ) = 1 (in [5])
  2161. 229 --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=368, si_uid=0, si_status=255, si_utime=1, si_stime=1} ---
  2162. 229 wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 255}], WNOHANG, NULL) = 368
  2163. 229 wait4(-1, 0x7ffc147cc654, WNOHANG, NULL) = -1 ECHILD (No child processes)
  2164. 229 rt_sigaction(SIGCHLD, NULL, {0x55f6f1ac5450, [], SA_RESTORER, 0x7fc45d78b680}, 8) = 0
  2165. 229 rt_sigreturn({mask=[]}) = 1
  2166. 229 close(5) = 0
  2167. 229 select(7, [3], NULL, NULL, NULL <detached ...>
Advertisement
Add Comment
Please, Sign In to add comment