API tools faq
paste
Advertisement
ishtanzar

strace

ishtanzar
May 16th, 2014
190
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 168.69 KB | None | 0 0
raw download clone embed print report
  1. 23231 execve("/usr/sbin/pppd", ["pppd", "call", "sd-56016", "logfd", "2", "nodetach", "debug", "dump"], [/* 14 vars */]) = 0
  2. 23231 brk(0) = 0x2099000
  3. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  4. 23231 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f5000
  5. 23231 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  6. 23231 open("/etc/ld.so.cache", O_RDONLY) = 3
  7. 23231 fstat(3, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  8. 23231 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fa68d2ec000
  9. 23231 close(3) = 0
  10. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  11. 23231 open("/lib/x86_64-linux-gnu/libutil.so.1", O_RDONLY) = 3
  12. 23231 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\16\0\0\0\0\0\0@\0\0\0\0\0\0\0\20\"\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\36\0\35\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\300\26\0\0\0\0\0\0\300\26\0\0\0\0\0\0\300\26\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  13. 23231 fstat(3, {st_mode=S_IFREG|0644, st_size=10640, ...}) = 0
  14. 23231 mmap(NULL, 2105608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa68ced5000
  15. 23231 mprotect(0x7fa68ced7000, 2093056, PROT_NONE) = 0
  16. 23231 mmap(0x7fa68d0d6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7fa68d0d6000
  17. 23231 close(3) = 0
  18. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  19. 23231 open("/lib/x86_64-linux-gnu/libcrypt.so.1", O_RDONLY) = 3
  20. 23231 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0P\n\0\0\0\0\0\0@\0\0\0\0\0\0\0\240\201\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\36\0\35\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0 v\0\0\0\0\0\0 v\0\0\0\0\0\0 v\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  21. 23231 fstat(3, {st_mode=S_IFREG|0644, st_size=35104, ...}) = 0
  22. 23231 mmap(NULL, 2318784, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa68cc9e000
  23. 23231 mprotect(0x7fa68cca6000, 2093056, PROT_NONE) = 0
  24. 23231 mmap(0x7fa68cea5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x7fa68cea5000
  25. 23231 mmap(0x7fa68cea7000, 184768, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa68cea7000
  26. 23231 close(3) = 0
  27. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  28. 23231 open("/lib/x86_64-linux-gnu/libpam.so.0", O_RDONLY) = 3
  29. 23231 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 )\0\0\0\0\0\0@\0\0\0\0\0\0\0\0\323\0\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\34\0\33\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0$\304\0\0\0\0\0\0$\304\0\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0@\314\0\0\0\0\0\0@\314 \0\0\0\0\0@\314 \0\0\0\0\0\320\5\0\0\0\0\0\0\340\5\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\320\315\0\0\0\0\0\0\320\315 \0\0\0\0\0"..., 832) = 832
  30. 23231 fstat(3, {st_mode=S_IFREG|0644, st_size=55808, ...}) = 0
  31. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2eb000
  32. 23231 mmap(NULL, 2150944, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa68ca90000
  33. 23231 mprotect(0x7fa68ca9d000, 2093056, PROT_NONE) = 0
  34. 23231 mmap(0x7fa68cc9c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc000) = 0x7fa68cc9c000
  35. 23231 close(3) = 0
  36. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  37. 23231 open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY) = 3
  38. 23231 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0@\0\0\0\0\0\0\0\2601\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0 \0\37\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  39. 23231 fstat(3, {st_mode=S_IFREG|0644, st_size=14768, ...}) = 0
  40. 23231 mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa68c88c000
  41. 23231 mprotect(0x7fa68c88e000, 2097152, PROT_NONE) = 0
  42. 23231 mmap(0x7fa68ca8e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x7fa68ca8e000
  43. 23231 close(3) = 0
  44. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  45. 23231 open("/usr/lib/x86_64-linux-gnu/libpcap.so.0.8", O_RDONLY) = 3
  46. 23231 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\0\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\227\3\0\0\0\0\0\0\0\0\0@\0008\0\10\0@\0 \0\37\0\6\0\0\0\4\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\300\1\0\0\0\0\0\0\300\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0xx\3\0\0\0\0\0xx\3\0\0\0\0\0\0\20\0\0\0\0\0\0\1\0\0\0\6\0\0\0\300~\3\0\0\0\0\0\300\216\3\0\0\0\0\0"..., 832) = 832
  47. 23231 fstat(3, {st_mode=S_IFREG|0644, st_size=237376, ...}) = 0
  48. 23231 mmap(NULL, 242264, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa68d2af000
  49. 23231 mmap(0x7fa68d2e7000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x37000) = 0x7fa68d2e7000
  50. 23231 mmap(0x7fa68d2ea000, 600, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2ea000
  51. 23231 close(3) = 0
  52. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  53. 23231 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 3
  54. 23231 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  55. 23231 fstat(3, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  56. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2ae000
  57. 23231 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7fa68c501000
  58. 23231 mprotect(0x7fa68c683000, 2093056, PROT_NONE) = 0
  59. 23231 mmap(0x7fa68c882000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x181000) = 0x7fa68c882000
  60. 23231 mmap(0x7fa68c887000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa68c887000
  61. 23231 close(3) = 0
  62. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2ad000
  63. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2ac000
  64. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2ab000
  65. 23231 arch_prctl(ARCH_SET_FS, 0x7fa68d2ac700) = 0
  66. 23231 mprotect(0x7fa68c882000, 16384, PROT_READ) = 0
  67. 23231 mprotect(0x7fa68d2e7000, 8192, PROT_READ) = 0
  68. 23231 mprotect(0x7fa68ca8e000, 4096, PROT_READ) = 0
  69. 23231 mprotect(0x7fa68cc9c000, 4096, PROT_READ) = 0
  70. 23231 mprotect(0x7fa68cea5000, 4096, PROT_READ) = 0
  71. 23231 mprotect(0x7fa68d0d6000, 4096, PROT_READ) = 0
  72. 23231 mprotect(0x7fa68d2f7000, 4096, PROT_READ) = 0
  73. 23231 munmap(0x7fa68d2ec000, 35560) = 0
  74. 23231 socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
  75. 23231 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
  76. 23231 uname({sys="Linux", node="avalon", ...}) = 0
  77. 23231 umask(0777) = 022
  78. 23231 umask(022) = 0777
  79. 23231 getuid() = 0
  80. 23231 brk(0) = 0x2099000
  81. 23231 brk(0x20ba000) = 0x20ba000
  82. 23231 getgroups(65536, [0]) = 1
  83. 23231 gettimeofday({1400247961, 515266}, NULL) = 0
  84. 23231 getpid() = 23231
  85. 23231 geteuid() = 0
  86. 23231 open("/etc/ppp/options", O_RDONLY) = 4
  87. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=13209, ...}) = 0
  88. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f4000
  89. 23231 read(4, "# /etc/ppp/options\n# \n# Originally created by Jim Knoble <jmknoble@mercury.interpath.net>\n# Modified for Debian by alvar Bray <alvar@meiko.co.uk>\n# Modified for PPP Server setup by Christoph Lameter <"..., 4096) = 4096
  90. 23231 read(4, " (use default, i.e.\n# address/control field disabled).\n#-ac\n\n# Disable asyncmap negotiation (use the default asyncmap, i.e. escape\n# all control characters).\n#-am\n\n# Don't fork to become a background "..., 4096) = 4096
  91. 23231 read(4, "ven, pppd will presume the peer to be dead if n\n# LCP echo-requests are sent without receiving a valid LCP echo-reply.\n# If this happens, pppd will terminate the connection. Use of this\n# option requ"..., 4096) = 4096
  92. 23231 read(4, "inates. This option only has any effect if the persist or demand\n# option is used. The holdoff period is not applied if the link was\n# terminated because it was idle.\n#holdoff <n>\n\n# Wait for up n m"..., 4096) = 921
  93. 23231 read(4, "", 4096) = 0
  94. 23231 close(4) = 0
  95. 23231 munmap(0x7fa68d2f4000, 4096) = 0
  96. 23231 getuid() = 0
  97. 23231 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  98. 23231 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  99. 23231 close(4) = 0
  100. 23231 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  101. 23231 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  102. 23231 close(4) = 0
  103. 23231 open("/etc/nsswitch.conf", O_RDONLY) = 4
  104. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=475, ...}) = 0
  105. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f4000
  106. 23231 read(4, "# /etc/nsswitch.conf\n#\n# Example configuration of GNU Name Service Switch functionality.\n# If you have the `glibc-doc-reference' and `info' packages installed, try:\n# `info libc \"Name Service Switch\"'"..., 4096) = 475
  107. 23231 read(4, "", 4096) = 0
  108. 23231 close(4) = 0
  109. 23231 munmap(0x7fa68d2f4000, 4096) = 0
  110. 23231 open("/etc/ld.so.cache", O_RDONLY) = 4
  111. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  112. 23231 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7fa68d2ec000
  113. 23231 close(4) = 0
  114. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  115. 23231 open("/lib/x86_64-linux-gnu/libnss_compat.so.2", O_RDONLY) = 4
  116. 23231 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\22\0\0\0\0\0\0@\0\0\0\0\0\0\0\340s\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\36\0\35\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\0\\\0\0\0\0\0\0\0\\\0\0\0\0\0\0\0\\\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  117. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=31584, ...}) = 0
  118. 23231 mmap(NULL, 2127048, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7fa68c2f9000
  119. 23231 mprotect(0x7fa68c300000, 2093056, PROT_NONE) = 0
  120. 23231 mmap(0x7fa68c4ff000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x6000) = 0x7fa68c4ff000
  121. 23231 close(4) = 0
  122. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  123. 23231 open("/lib/x86_64-linux-gnu/libnsl.so.1", O_RDONLY) = 4
  124. 23231 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 @\0\0\0\0\0\0@\0\0\0\0\0\0\0`T\1\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\36\0\35\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\340\32\1\0\0\0\0\0\340\32\1\0\0\0\0\0\340\32\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  125. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=89056, ...}) = 0
  126. 23231 mmap(NULL, 2194128, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7fa68c0e1000
  127. 23231 mprotect(0x7fa68c0f6000, 2093056, PROT_NONE) = 0
  128. 23231 mmap(0x7fa68c2f5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x14000) = 0x7fa68c2f5000
  129. 23231 mmap(0x7fa68c2f7000, 6864, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fa68c2f7000
  130. 23231 close(4) = 0
  131. 23231 mprotect(0x7fa68c2f5000, 4096, PROT_READ) = 0
  132. 23231 mprotect(0x7fa68c4ff000, 4096, PROT_READ) = 0
  133. 23231 munmap(0x7fa68d2ec000, 35560) = 0
  134. 23231 open("/etc/ld.so.cache", O_RDONLY) = 4
  135. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  136. 23231 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 4, 0) = 0x7fa68d2ec000
  137. 23231 close(4) = 0
  138. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  139. 23231 open("/lib/x86_64-linux-gnu/libnss_nis.so.2", O_RDONLY) = 4
  140. 23231 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 \0\0\0\0\0\0@\0\0\0\0\0\0\0\240\242\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\36\0\35\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\260\204\0\0\0\0\0\0\260\204\0\0\0\0\0\0\260\204\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  141. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=43552, ...}) = 0
  142. 23231 mmap(NULL, 2139320, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7fa68bed6000
  143. 23231 mprotect(0x7fa68bee0000, 2093056, PROT_NONE) = 0
  144. 23231 mmap(0x7fa68c0df000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x9000) = 0x7fa68c0df000
  145. 23231 close(4) = 0
  146. 23231 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  147. 23231 open("/lib/x86_64-linux-gnu/libnss_files.so.2", O_RDONLY) = 4
  148. 23231 read(4, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\200!\0\0\0\0\0\0@\0\0\0\0\0\0\0\200\262\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\36\0\35\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\360\223\0\0\0\0\0\0\360\223\0\0\0\0\0\0\360\223\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  149. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=47616, ...}) = 0
  150. 23231 mmap(NULL, 2143624, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x7fa68bcca000
  151. 23231 mprotect(0x7fa68bcd5000, 2093056, PROT_NONE) = 0
  152. 23231 mmap(0x7fa68bed4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0xa000) = 0x7fa68bed4000
  153. 23231 close(4) = 0
  154. 23231 mprotect(0x7fa68bed4000, 4096, PROT_READ) = 0
  155. 23231 mprotect(0x7fa68c0df000, 4096, PROT_READ) = 0
  156. 23231 munmap(0x7fa68d2ec000, 35560) = 0
  157. 23231 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 4
  158. 23231 lseek(4, 0, SEEK_CUR) = 0
  159. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=1646, ...}) = 0
  160. 23231 mmap(NULL, 1646, PROT_READ, MAP_SHARED, 4, 0) = 0x7fa68d2f4000
  161. 23231 lseek(4, 1646, SEEK_SET) = 1646
  162. 23231 munmap(0x7fa68d2f4000, 1646) = 0
  163. 23231 close(4) = 0
  164. 23231 geteuid() = 0
  165. 23231 getuid() = 0
  166. 23231 setresuid(-1, 0, -1) = 0
  167. 23231 open("/root/.ppprc", O_RDONLY) = -1 ENOENT (No such file or directory)
  168. 23231 setresuid(-1, 0, -1) = 0
  169. 23231 geteuid() = 0
  170. 23231 getuid() = 0
  171. 23231 setresuid(-1, 0, -1) = 0
  172. 23231 open("/etc/ppp/peers/sd-56016", O_RDONLY) = 4
  173. 23231 setresuid(-1, 0, -1) = 0
  174. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=139, ...}) = 0
  175. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f4000
  176. 23231 read(4, "pty \"pptp 212.83.184.133 --nolaunchpppd\"\nname ishtanzar\npassword Z7lnTFooAnxQ\nremotename pptpd\nrequire-mppe-128\nfile /etc/ppp/options.pptp\n", 4096) = 139
  177. 23231 geteuid() = 0
  178. 23231 getuid() = 0
  179. 23231 setresuid(-1, 0, -1) = 0
  180. 23231 open("/etc/ppp/options.pptp", O_RDONLY) = 5
  181. 23231 setresuid(-1, 0, -1) = 0
  182. 23231 fstat(5, {st_mode=S_IFREG|0644, st_size=1758, ...}) = 0
  183. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f3000
  184. 23231 read(5, "###############################################################################\n# $Id: options.pptp,v 1.3 2006/03/26 23:11:05 quozl Exp $\n#\n# Sample PPTP PPP options file /etc/ppp/options.pptp\n# Optio"..., 4096) = 1758
  185. 23231 read(5, "", 4096) = 0
  186. 23231 close(5) = 0
  187. 23231 munmap(0x7fa68d2f3000, 4096) = 0
  188. 23231 read(4, "", 4096) = 0
  189. 23231 close(4) = 0
  190. 23231 munmap(0x7fa68d2f4000, 4096) = 0
  191. 23231 geteuid() = 0
  192. 23231 uname({sys="Linux", node="avalon", ...}) = 0
  193. 23231 open("/dev/ppp", O_RDWR) = 4
  194. 23231 close(4) = 0
  195. 23231 open("/etc/resolv.conf", O_RDONLY) = 4
  196. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=72, ...}) = 0
  197. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f4000
  198. 23231 read(4, "#nameserver 127.0.0.1\nnameserver 88.191.254.60\nnameserver 88.191.254.70\n", 4096) = 72
  199. 23231 read(4, "", 4096) = 0
  200. 23231 close(4) = 0
  201. 23231 munmap(0x7fa68d2f4000, 4096) = 0
  202. 23231 uname({sys="Linux", node="avalon", ...}) = 0
  203. 23231 stat("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=72, ...}) = 0
  204. 23231 open("/etc/resolv.conf", O_RDONLY) = 4
  205. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=72, ...}) = 0
  206. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f4000
  207. 23231 read(4, "#nameserver 127.0.0.1\nnameserver 88.191.254.60\nnameserver 88.191.254.70\n", 4096) = 72
  208. 23231 read(4, "", 4096) = 0
  209. 23231 close(4) = 0
  210. 23231 munmap(0x7fa68d2f4000, 4096) = 0
  211. 23231 uname({sys="Linux", node="avalon", ...}) = 0
  212. 23231 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  213. 23231 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  214. 23231 close(4) = 0
  215. 23231 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 4
  216. 23231 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
  217. 23231 close(4) = 0
  218. 23231 open("/etc/host.conf", O_RDONLY) = 4
  219. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=9, ...}) = 0
  220. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f4000
  221. 23231 read(4, "multi on\n", 4096) = 9
  222. 23231 read(4, "", 4096) = 0
  223. 23231 close(4) = 0
  224. 23231 munmap(0x7fa68d2f4000, 4096) = 0
  225. 23231 open("/etc/hosts", O_RDONLY|O_CLOEXEC) = 4
  226. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=571, ...}) = 0
  227. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f4000
  228. 23231 read(4, "127.0.0.1\tlocalhost avalon\n::1\t\tlocalhost ip6-localhost ip6-loopback avalon\nfe00::0\t\tip6-localnet\nff00::0\t\tip6-mcastprefix\nff02::1\t\tip6-allnodes\nff02::2\t\tip6-allrouters\n\n88.190.22.113 avalon\n88.190."..., 4096) = 571
  229. 23231 read(4, "", 4096) = 0
  230. 23231 close(4) = 0
  231. 23231 munmap(0x7fa68d2f4000, 4096) = 0
  232. 23231 fstat(2, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 8), ...}) = 0
  233. 23231 time([1400247961]) = 1400247961
  234. 23231 open("/etc/localtime", O_RDONLY) = 4
  235. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=2945, ...}) = 0
  236. 23231 fstat(4, {st_mode=S_IFREG|0644, st_size=2945, ...}) = 0
  237. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fa68d2f4000
  238. 23231 read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\0\0\0\f\0\0\0\0\0\0\0\267\0\0\0\f\0\0\0\33\221`P\213\233Gx\360\233\327,p\234\274\221p\235\300H\360\236\211\376p\237\240*\360\240`\245\360\241\200\f\360\242.\22\360\243zL\360\2445\201\360\245^#p\246%5\360\247'\233\360\250X&p\251\7}\360\251\3564p\252\347_\360\253\327P\360\254\307A\360\255\311\247\360\256\247#\360\257\240Op\260\207\5\360\261\211k\360\262p\"p\263r\210p\264P\4p\265I/\360\266/\346p\2672Lp\270\17\310p\270\377\271p\271\357\252p\272\326`\360\273\330\306\360\274\310\267\360\275\270\250\360"..., 4096) = 2945
  239. 23231 lseek(4, -1863, SEEK_CUR) = 1082
  240. 23231 read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\r\0\0\0\r\0\0\0\0\0\0\0\270\0\0\0\r\0\0\0\37\377\377\377\377k\310J\213\377\377\377\377\221`P\213\377\377\377\377\233Gx\360\377\377\377\377\233\327,p\377\377\377\377\234\274\221p\377\377\377\377\235\300H\360\377\377\377\377\236\211\376p\377\377\377\377\237\240*\360\377\377\377\377\240`\245\360\377\377\377\377\241\200\f\360\377\377\377\377\242.\22\360\377\377\377\377\243zL\360\377\377\377\377\2445\201\360\377\377\377\377\245^#p\377\377\377\377\246%5\360\377\377\377\377\247'\233\360\377\377\377\377\250X&p\377\377\377\377\251\7}\360\377\377\377\377\251\3564p\377\377\377\377"..., 4096) = 1863
  241. 23231 close(4) = 0
  242. 23231 munmap(0x7fa68d2f4000, 4096) = 0
  243. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: pppd options in effect:", 57, MSG_NOSIGNAL, NULL, 0) = 57
  244. 23231 write(2, "pppd options in effect:", 23) = 23
  245. 23231 write(2, "\n", 1) = 1
  246. 23231 time([1400247961]) = 1400247961
  247. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: debug\t\t# (from command line)", 62, MSG_NOSIGNAL, NULL, 0) = 62
  248. 23231 write(2, "debug\t\t# (from command line)", 28) = 28
  249. 23231 write(2, "\n", 1) = 1
  250. 23231 time([1400247961]) = 1400247961
  251. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: nodetach\t\t# (from command line)", 65, MSG_NOSIGNAL, NULL, 0) = 65
  252. 23231 write(2, "nodetach\t\t# (from command line)", 31) = 31
  253. 23231 write(2, "\n", 1) = 1
  254. 23231 time([1400247961]) = 1400247961
  255. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: logfd 2\t\t# (from command line)", 64, MSG_NOSIGNAL, NULL, 0) = 64
  256. 23231 write(2, "logfd 2\t\t# (from command line)", 30) = 30
  257. 23231 write(2, "\n", 1) = 1
  258. 23231 time([1400247961]) = 1400247961
  259. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: dump\t\t# (from command line)", 61, MSG_NOSIGNAL, NULL, 0) = 61
  260. 23231 write(2, "dump\t\t# (from command line)", 27) = 27
  261. 23231 write(2, "\n", 1) = 1
  262. 23231 time([1400247961]) = 1400247961
  263. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: noauth\t\t# (from /etc/ppp/options.pptp)", 72, MSG_NOSIGNAL, NULL, 0) = 72
  264. 23231 write(2, "noauth\t\t# (from /etc/ppp/options.pptp)", 38) = 38
  265. 23231 write(2, "\n", 1) = 1
  266. 23231 time([1400247961]) = 1400247961
  267. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: refuse-pap\t\t# (from /etc/ppp/options.pptp)", 76, MSG_NOSIGNAL, NULL, 0) = 76
  268. 23231 write(2, "refuse-pap\t\t# (from /etc/ppp/options.pptp)", 42) = 42
  269. 23231 write(2, "\n", 1) = 1
  270. 23231 time([1400247961]) = 1400247961
  271. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: refuse-chap\t\t# (from /etc/ppp/options.pptp)", 77, MSG_NOSIGNAL, NULL, 0) = 77
  272. 23231 write(2, "refuse-chap\t\t# (from /etc/ppp/options.pptp)", 43) = 43
  273. 23231 write(2, "\n", 1) = 1
  274. 23231 time([1400247961]) = 1400247961
  275. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: refuse-mschap\t\t# (from /etc/ppp/options.pptp)", 79, MSG_NOSIGNAL, NULL, 0) = 79
  276. 23231 write(2, "refuse-mschap\t\t# (from /etc/ppp/options.pptp)", 45) = 45
  277. 23231 write(2, "\n", 1) = 1
  278. 23231 time([1400247961]) = 1400247961
  279. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: refuse-eap\t\t# (from /etc/ppp/options.pptp)", 76, MSG_NOSIGNAL, NULL, 0) = 76
  280. 23231 write(2, "refuse-eap\t\t# (from /etc/ppp/options.pptp)", 42) = 42
  281. 23231 write(2, "\n", 1) = 1
  282. 23231 time([1400247961]) = 1400247961
  283. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: name ishtanzar\t\t# (from /etc/ppp/peers/sd-56016)", 82, MSG_NOSIGNAL, NULL, 0) = 82
  284. 23231 write(2, "name ishtanzar\t\t# (from /etc/ppp/peers/sd-56016)", 48) = 48
  285. 23231 write(2, "\n", 1) = 1
  286. 23231 time([1400247961]) = 1400247961
  287. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: password ??????\t\t# (from /etc/ppp/peers/sd-56016)", 83, MSG_NOSIGNAL, NULL, 0) = 83
  288. 23231 write(2, "password ??????\t\t# (from /etc/ppp/peers/sd-56016)", 49) = 49
  289. 23231 write(2, "\n", 1) = 1
  290. 23231 time([1400247961]) = 1400247961
  291. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: remotename pptpd\t\t# (from /etc/ppp/peers/sd-56016)", 84, MSG_NOSIGNAL, NULL, 0) = 84
  292. 23231 write(2, "remotename pptpd\t\t# (from /etc/ppp/peers/sd-56016)", 50) = 50
  293. 23231 write(2, "\n", 1) = 1
  294. 23231 time([1400247961]) = 1400247961
  295. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: \t\t# (from /etc/ppp/options.pptp)", 66, MSG_NOSIGNAL, NULL, 0) = 66
  296. 23231 write(2, "\t\t# (from /etc/ppp/options.pptp)", 32) = 32
  297. 23231 write(2, "\n", 1) = 1
  298. 23231 time([1400247961]) = 1400247961
  299. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: pty pptp 212.83.184.133 --nolaunchpppd\t\t# (from /etc/ppp/peers/sd-56016)", 106, MSG_NOSIGNAL, NULL, 0) = 106
  300. 23231 write(2, "pty pptp 212.83.184.133 --nolaunchpppd\t\t# (from /etc/ppp/peers/sd-56016)", 72) = 72
  301. 23231 write(2, "\n", 1) = 1
  302. 23231 time([1400247961]) = 1400247961
  303. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: crtscts\t\t# (from /etc/ppp/options)", 68, MSG_NOSIGNAL, NULL, 0) = 68
  304. 23231 write(2, "crtscts\t\t# (from /etc/ppp/options)", 34) = 34
  305. 23231 write(2, "\n", 1) = 1
  306. 23231 time([1400247961]) = 1400247961
  307. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: \t\t# (from /etc/ppp/options)", 61, MSG_NOSIGNAL, NULL, 0) = 61
  308. 23231 write(2, "\t\t# (from /etc/ppp/options)", 27) = 27
  309. 23231 write(2, "\n", 1) = 1
  310. 23231 time([1400247961]) = 1400247961
  311. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: asyncmap 0\t\t# (from /etc/ppp/options)", 71, MSG_NOSIGNAL, NULL, 0) = 71
  312. 23231 write(2, "asyncmap 0\t\t# (from /etc/ppp/options)", 37) = 37
  313. 23231 write(2, "\n", 1) = 1
  314. 23231 time([1400247961]) = 1400247961
  315. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: lcp-echo-failure 4\t\t# (from /etc/ppp/options)", 79, MSG_NOSIGNAL, NULL, 0) = 79
  316. 23231 write(2, "lcp-echo-failure 4\t\t# (from /etc/ppp/options)", 45) = 45
  317. 23231 write(2, "\n", 1) = 1
  318. 23231 time([1400247961]) = 1400247961
  319. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: lcp-echo-interval 30\t\t# (from /etc/ppp/options)", 81, MSG_NOSIGNAL, NULL, 0) = 81
  320. 23231 write(2, "lcp-echo-interval 30\t\t# (from /etc/ppp/options)", 47) = 47
  321. 23231 write(2, "\n", 1) = 1
  322. 23231 time([1400247961]) = 1400247961
  323. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: hide-password\t\t# (from /etc/ppp/options)", 74, MSG_NOSIGNAL, NULL, 0) = 74
  324. 23231 write(2, "hide-password\t\t# (from /etc/ppp/options)", 40) = 40
  325. 23231 write(2, "\n", 1) = 1
  326. 23231 time([1400247961]) = 1400247961
  327. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: nobsdcomp\t\t# (from /etc/ppp/options.pptp)", 75, MSG_NOSIGNAL, NULL, 0) = 75
  328. 23231 write(2, "nobsdcomp\t\t# (from /etc/ppp/options.pptp)", 41) = 41
  329. 23231 write(2, "\n", 1) = 1
  330. 23231 time([1400247961]) = 1400247961
  331. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: nodeflate\t\t# (from /etc/ppp/options.pptp)", 75, MSG_NOSIGNAL, NULL, 0) = 75
  332. 23231 write(2, "nodeflate\t\t# (from /etc/ppp/options.pptp)", 41) = 41
  333. 23231 write(2, "\n", 1) = 1
  334. 23231 time([1400247961]) = 1400247961
  335. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: require-mppe-128\t\t# (from /etc/ppp/options.pptp)", 82, MSG_NOSIGNAL, NULL, 0) = 82
  336. 23231 write(2, "require-mppe-128\t\t# (from /etc/ppp/options.pptp)", 48) = 48
  337. 23231 write(2, "\n", 1) = 1
  338. 23231 time([1400247961]) = 1400247961
  339. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: noipx\t\t# (from /etc/ppp/options)", 66, MSG_NOSIGNAL, NULL, 0) = 66
  340. 23231 write(2, "noipx\t\t# (from /etc/ppp/options)", 32) = 32
  341. 23231 write(2, "\n", 1) = 1
  342. 23231 open("/dev/null", O_RDWR) = 4
  343. 23231 setsid() = 23231
  344. 23231 chdir("/") = 0
  345. 23231 socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 5
  346. 23231 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 6
  347. 23231 open("/var/run/pppd2.tdb", O_RDWR|O_CREAT, 0644) = 7
  348. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=1}) = 0
  349. 23231 read(7, "TDB file\n\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0m\31\1&\203\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 168) = 168
  350. 23231 fstat(7, {st_mode=S_IFREG|0644, st_size=8192, ...}) = 0
  351. 23231 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_SHARED, 7, 0) = 0x7fa68d2f3000
  352. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=1}) = 0
  353. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1}) = 0
  354. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  355. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  356. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1}) = 0
  357. 23231 open("/proc/self/loginuid", O_RDONLY) = 8
  358. 23231 read(8, "4294967295", 12) = 10
  359. 23231 close(8) = 0
  360. 23231 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 8
  361. 23231 lseek(8, 0, SEEK_CUR) = 0
  362. 23231 fstat(8, {st_mode=S_IFREG|0644, st_size=1646, ...}) = 0
  363. 23231 mmap(NULL, 1646, PROT_READ, MAP_SHARED, 8, 0) = 0x7fa68d2f2000
  364. 23231 lseek(8, 1646, SEEK_SET) = 1646
  365. 23231 fstat(8, {st_mode=S_IFREG|0644, st_size=1646, ...}) = 0
  366. 23231 munmap(0x7fa68d2f2000, 1646) = 0
  367. 23231 close(8) = 0
  368. 23231 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
  369. 23231 fstat(0, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 8), ...}) = 0
  370. 23231 readlink("/proc/self/fd/0", "/dev/pts/8"..., 511) = 10
  371. 23231 stat("/dev/pts/8", {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 8), ...}) = 0
  372. 23231 access("/var/run/utmpx", F_OK) = -1 ENOENT (No such file or directory)
  373. 23231 open("/var/run/utmp", O_RDONLY|O_CLOEXEC) = 8
  374. 23231 lseek(8, 0, SEEK_SET) = 0
  375. 23231 alarm(0) = 0
  376. 23231 rt_sigaction(SIGALRM, {0x7fa68c611d00, [], SA_RESTORER, 0x7fa68c5334f0}, {SIG_DFL, [], 0}, 8) = 0
  377. 23231 alarm(10) = 0
  378. 23231 fcntl(8, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=0, len=0}) = 0
  379. 23231 read(8, "\10\0\0\0\372\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0si\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  380. 23231 read(8, "\2\0\0\0\0\0\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0~~\0\0reboot\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  381. 23231 read(8, "\1\0\0\0002N\0\0~\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0~~\0\0runlevel\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  382. 23231 read(8, "\10\0\0\0\353\10\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0l2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  383. 23231 read(8, "\6\0\0\0i\17\0\0tty1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0001\0\0\0LOGIN\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  384. 23231 read(8, "\6\0\0\0j\17\0\0tty2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0002\0\0\0LOGIN\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  385. 23231 read(8, "\6\0\0\0k\17\0\0tty3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0003\0\0\0LOGIN\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  386. 23231 read(8, "\6\0\0\0l\17\0\0tty4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0004\0\0\0LOGIN\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  387. 23231 read(8, "\6\0\0\0m\17\0\0tty5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0005\0\0\0LOGIN\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  388. 23231 read(8, "\6\0\0\0n\17\0\0tty6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0006\0\0\0LOGIN\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  389. 23231 read(8, "\10\0\0\0\3620\0\0pts/0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0ts/0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  390. 23231 read(8, "\10\0\0\0\245\2\0\0pts/2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0ts/2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  391. 23231 read(8, "\7\0\0\0\202;\0\0pts/4\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0ts/4ishtanzar\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0pluton\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  392. 23231 read(8, "\7\0\0\0002N\0\0pts/5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0ts/5ishtanzar\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0pluton\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  393. 23231 read(8, "\7\0\0\0\34\26\0\0pts/7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0ts/7ishtanzar\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0pluton\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  394. 23231 read(8, "\7\0\0\0\224X\0\0pts/8\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0ts/8ishtanzar\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0pluton\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 384) = 384
  395. 23231 fcntl(8, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=0}) = 0
  396. 23231 alarm(0) = 10
  397. 23231 rt_sigaction(SIGALRM, {SIG_DFL, [], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  398. 23231 close(8) = 0
  399. 23231 time([1400247961]) = 1400247961
  400. 23231 sendto(3, "<149>May 16 15:46:01 pppd[23231]: pppd 2.4.5 started by ishtanzar, uid 0", 72, MSG_NOSIGNAL, NULL, 0) = 72
  401. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1}) = 0
  402. 23231 fcntl(7, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=696, len=1}) = 0
  403. 23231 fcntl(7, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=696, len=1}) = 0
  404. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  405. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  406. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  407. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  408. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1}) = 0
  409. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=424, len=1}) = 0
  410. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  411. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  412. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=424, len=1}) = 0
  413. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1}) = 0
  414. 23231 fcntl(7, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=696, len=1}) = 0
  415. 23231 fcntl(7, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=696, len=1}) = 0
  416. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  417. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  418. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  419. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  420. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1}) = 0
  421. 23231 rt_sigaction(SIGHUP, {0x40b910, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  422. 23231 rt_sigaction(SIGINT, {0x40b8a0, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  423. 23231 rt_sigaction(SIGTERM, {0x40b8a0, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  424. 23231 rt_sigaction(SIGCHLD, {0x40b870, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  425. 23231 rt_sigaction(SIGUSR1, {0x40b290, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  426. 23231 rt_sigaction(SIGUSR2, {0x40b840, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  427. 23231 rt_sigaction(SIGABRT, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  428. 23231 rt_sigaction(SIGALRM, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  429. 23231 rt_sigaction(SIGFPE, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  430. 23231 rt_sigaction(SIGILL, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  431. 23231 rt_sigaction(SIGPIPE, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  432. 23231 rt_sigaction(SIGQUIT, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  433. 23231 rt_sigaction(SIGSEGV, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  434. 23231 rt_sigaction(SIGBUS, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  435. 23231 rt_sigaction(SIGIO, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  436. 23231 rt_sigaction(SIGPROF, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  437. 23231 rt_sigaction(SIGSYS, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  438. 23231 rt_sigaction(SIGTRAP, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  439. 23231 rt_sigaction(SIGVTALRM, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  440. 23231 rt_sigaction(SIGXCPU, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  441. 23231 rt_sigaction(SIGXFSZ, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, NULL, 8) = 0
  442. 23231 rt_sigaction(SIGPIPE, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x7fa68c5334f0}, {0x40bd30, [HUP INT USR2 TERM CHLD], SA_RESTORER, 0x7fa68c5334f0}, 8) = 0
  443. 23231 gettimeofday({1400247961, 544191}, NULL) = 0
  444. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1}) = 0
  445. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1}) = 0
  446. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1}) = 0
  447. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1}) = 0
  448. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1}) = 0
  449. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1}) = 0
  450. 23231 open("/dev/ptmx", O_RDWR) = 8
  451. 23231 ioctl(8, TIOCGPTN, [9]) = 0
  452. 23231 chmod("/dev/pts/9", 0600) = 0
  453. 23231 ioctl(8, TIOCSPTLCK, [0]) = 0
  454. 23231 open("/dev/pts/9", O_RDWR|O_NOCTTY) = 9
  455. 23231 ioctl(9, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
  456. 23231 ioctl(9, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
  457. 23231 ioctl(9, SNDCTL_TMR_CONTINUE or TCSETSF, {B38400 -opost -isig -icanon -echo ...}) = 0
  458. 23231 ioctl(9, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 -opost -isig -icanon -echo ...}) = 0
  459. 23231 ioctl(9, TIOCMBIS, [TIOCM_DTR]) = -1 EINVAL (Invalid argument)
  460. 23231 ioctl(9, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 -opost -isig -icanon -echo ...}) = 0
  461. 23231 ioctl(9, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 -opost -isig -icanon -echo ...}) = 0
  462. 23231 ioctl(9, SNDCTL_TMR_CONTINUE or TCSETSF, {B38400 -opost -isig -icanon -echo ...}) = 0
  463. 23231 ioctl(9, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 -opost -isig -icanon -echo ...}) = 0
  464. 23231 dup(4) = 10
  465. 23231 close(10) = 0
  466. 23231 pipe([10, 11]) = 0
  467. 23231 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fa68d2ac9d0) = 23232
  468. 23231 close(11) = 0
  469. 23232 close(5 <unfinished ...>
  470. 23231 read(10, <unfinished ...>
  471. 23232 <... close resumed> ) = 0
  472. 23232 close(6) = 0
  473. 23232 munmap(0x7fa68d2f3000, 8192) = 0
  474. 23232 close(7) = 0
  475. 23232 close(3) = 0
  476. 23232 dup2(8, 0) = 0
  477. 23232 dup2(8, 1) = 1
  478. 23232 close(9) = 0
  479. 23232 close(4294967295) = -1 EBADF (Bad file descriptor)
  480. 23232 close(4) = 0
  481. 23232 close(8) = 0
  482. 23232 close(8) = -1 EBADF (Bad file descriptor)
  483. 23232 close(10) = 0
  484. 23232 close(11) = 0
  485. 23231 <... read resumed> "", 1) = 0
  486. 23232 getgid( <unfinished ...>
  487. 23231 close(10 <unfinished ...>
  488. 23232 <... getgid resumed> ) = 0
  489. 23231 <... close resumed> ) = 0
  490. 23232 setgid(0) = 0
  491. 23231 close(8 <unfinished ...>
  492. 23232 setuid(0 <unfinished ...>
  493. 23231 <... close resumed> ) = 0
  494. 23232 <... setuid resumed> ) = 0
  495. 23232 getuid( <unfinished ...>
  496. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1} <unfinished ...>
  497. 23232 <... getuid resumed> ) = 0
  498. 23231 <... fcntl resumed> ) = 0
  499. 23232 execve("/bin/sh", ["sh", "-c", "pptp 212.83.184.133 --nolaunchpppd"], [/* 14 vars */] <unfinished ...>
  500. 23231 fcntl(7, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=836, len=1}) = 0
  501. 23231 fcntl(7, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=836, len=1}) = 0
  502. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  503. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  504. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  505. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1} <unfinished ...>
  506. 23232 <... execve resumed> ) = 0
  507. 23231 <... fcntl resumed> ) = 0
  508. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1}) = 0
  509. 23232 brk(0 <unfinished ...>
  510. 23231 ioctl(9, TIOCEXCL <unfinished ...>
  511. 23232 <... brk resumed> ) = 0x17d2000
  512. 23231 <... ioctl resumed> , 0) = 0
  513. 23231 ioctl(9, TIOCSETD <unfinished ...>
  514. 23232 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  515. 23231 <... ioctl resumed> , [3]) = 0
  516. 23232 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
  517. 23231 ioctl(9, PPPIOCGCHAN <unfinished ...>
  518. 23232 <... mmap resumed> ) = 0x7f6008ec0000
  519. 23232 access("/etc/ld.so.preload", R_OK <unfinished ...>
  520. 23231 <... ioctl resumed> , 0x65257c) = 0
  521. 23232 <... access resumed> ) = -1 ENOENT (No such file or directory)
  522. 23231 time( <unfinished ...>
  523. 23232 open("/etc/ld.so.cache", O_RDONLY <unfinished ...>
  524. 23231 <... time resumed> [1400247961]) = 1400247961
  525. 23232 <... open resumed> ) = 3
  526. 23232 fstat(3, <unfinished ...>
  527. 23231 sendto(3, "<151>May 16 15:46:01 pppd[23231]: using channel 31", 50, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  528. 23232 <... fstat resumed> {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  529. 23231 <... sendto resumed> ) = 50
  530. 23232 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 3, 0 <unfinished ...>
  531. 23231 write(2, "using channel 31", 16) = 16
  532. 23232 <... mmap resumed> ) = 0x7f6008eb7000
  533. 23232 close(3 <unfinished ...>
  534. 23231 write(2, "\n", 1 <unfinished ...>
  535. 23232 <... close resumed> ) = 0
  536. 23232 access("/etc/ld.so.nohwcap", F_OK <unfinished ...>
  537. 23231 <... write resumed> ) = 1
  538. 23232 <... access resumed> ) = -1 ENOENT (No such file or directory)
  539. 23231 open("/dev/ppp", O_RDWR <unfinished ...>
  540. 23232 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY <unfinished ...>
  541. 23231 <... open resumed> ) = 8
  542. 23232 <... open resumed> ) = 3
  543. 23231 fcntl(8, F_SETFD, FD_CLOEXEC <unfinished ...>
  544. 23232 read(3, <unfinished ...>
  545. 23231 <... fcntl resumed> ) = 0
  546. 23232 <... read resumed> "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  547. 23231 ioctl(8, PPPIOCATTCHAN <unfinished ...>
  548. 23232 fstat(3, <unfinished ...>
  549. 23231 <... ioctl resumed> , 0x65257c) = 0
  550. 23232 <... fstat resumed> {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  551. 23231 fcntl(8, F_GETFL <unfinished ...>
  552. 23232 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0 <unfinished ...>
  553. 23231 <... fcntl resumed> ) = 0x8002 (flags O_RDWR|O_LARGEFILE)
  554. 23232 <... mmap resumed> ) = 0x7f6008918000
  555. 23231 fcntl(8, F_SETFL, O_RDWR|O_NONBLOCK|O_LARGEFILE <unfinished ...>
  556. 23232 mprotect(0x7f6008a9a000, 2093056, PROT_NONE <unfinished ...>
  557. 23231 <... fcntl resumed> ) = 0
  558. 23232 <... mprotect resumed> ) = 0
  559. 23231 open("/dev/ppp", O_RDWR <unfinished ...>
  560. 23232 mmap(0x7f6008c99000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x181000 <unfinished ...>
  561. 23231 <... open resumed> ) = 10
  562. 23232 <... mmap resumed> ) = 0x7f6008c99000
  563. 23231 fcntl(10, F_GETFL <unfinished ...>
  564. 23232 mmap(0x7f6008c9e000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0 <unfinished ...>
  565. 23231 <... fcntl resumed> ) = 0x8002 (flags O_RDWR|O_LARGEFILE)
  566. 23232 <... mmap resumed> ) = 0x7f6008c9e000
  567. 23231 fcntl(10, F_SETFL, O_RDWR|O_NONBLOCK|O_LARGEFILE <unfinished ...>
  568. 23232 close(3 <unfinished ...>
  569. 23231 <... fcntl resumed> ) = 0
  570. 23232 <... close resumed> ) = 0
  571. 23231 ioctl(10, PPPIOCNEWUNIT <unfinished ...>
  572. 23232 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6008eb6000
  573. 23232 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6008eb5000
  574. 23232 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f6008eb4000
  575. 23232 arch_prctl(ARCH_SET_FS, 0x7f6008eb5700) = 0
  576. 23232 mprotect(0x7f6008c99000, 16384, PROT_READ) = 0
  577. 23232 mprotect(0x7f6008ec2000, 4096, PROT_READ) = 0
  578. 23232 munmap(0x7f6008eb7000, 35560) = 0
  579. 23232 getpid( <unfinished ...>
  580. 23231 <... ioctl resumed> , 0x654580) = 0
  581. 23232 <... getpid resumed> ) = 23232
  582. 23231 ioctl(8, PPPIOCCONNECT <unfinished ...>
  583. 23232 rt_sigaction(SIGCHLD, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f600894a4f0}, <unfinished ...>
  584. 23231 <... ioctl resumed> , 0x654580) = 0
  585. 23232 <... rt_sigaction resumed> NULL, 8) = 0
  586. 23231 ioctl(10, PPPIOCSDEBUG <unfinished ...>
  587. 23232 geteuid( <unfinished ...>
  588. 23231 <... ioctl resumed> , 0x7fffea07b3bc) = 0
  589. 23232 <... geteuid resumed> ) = 0
  590. 23231 ioctl(8, PPPIOCGFLAGS, 0x7fffea07b3cc) = 0
  591. 23231 ioctl(8, PPPIOCSFLAGS <unfinished ...>
  592. 23232 brk(0 <unfinished ...>
  593. 23231 <... ioctl resumed> , 0x7fffea07b3cc) = 0
  594. 23232 <... brk resumed> ) = 0x17d2000
  595. 23232 brk(0x17f3000 <unfinished ...>
  596. 23231 time( <unfinished ...>
  597. 23232 <... brk resumed> ) = 0x17f3000
  598. 23231 <... time resumed> [1400247961]) = 1400247961
  599. 23232 getppid( <unfinished ...>
  600. 23231 sendto(3, "<150>May 16 15:46:01 pppd[23231]: Using interface ppp0", 54, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  601. 23232 <... getppid resumed> ) = 23231
  602. 23231 <... sendto resumed> ) = 54
  603. 23232 getcwd( <unfinished ...>
  604. 23231 write(2, "Using interface ppp0", 20 <unfinished ...>
  605. 23232 <... getcwd resumed> "/", 4096) = 2
  606. 23232 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
  607. 23232 rt_sigaction(SIGINT, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f600894a4f0}, NULL, 8) = 0
  608. 23232 rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
  609. 23232 rt_sigaction(SIGQUIT, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f600894a4f0}, NULL, 8) = 0
  610. 23232 rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
  611. 23232 rt_sigaction(SIGTERM, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f600894a4f0}, NULL, 8) = 0
  612. 23232 stat("/usr/local/sbin/pptp", 0x7fffd89c3e50) = -1 ENOENT (No such file or directory)
  613. 23232 stat("/usr/local/bin/pptp", 0x7fffd89c3e50) = -1 ENOENT (No such file or directory)
  614. 23232 stat("/usr/sbin/pptp", {st_mode=S_IFREG|0755, st_size=70512, ...}) = 0
  615. 23232 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f6008eb59d0) = 23234
  616. 23232 wait4(-1, <unfinished ...>
  617. 23231 <... write resumed> ) = 20
  618. 23231 write(2, "\n", 1) = 1
  619. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=356, len=1}) = 0
  620. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1} <unfinished ...>
  621. 23234 execve("/usr/sbin/pptp", ["pptp", "212.83.184.133", "--nolaunchpppd"], [/* 15 vars */] <unfinished ...>
  622. 23231 <... fcntl resumed> ) = 0
  623. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  624. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=356, len=1}) = 0
  625. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1}) = 0
  626. 23234 <... execve resumed> ) = 0
  627. 23231 fcntl(7, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=836, len=1}) = 0
  628. 23231 fcntl(7, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=836, len=1}) = 0
  629. 23234 brk(0) = 0xc57000
  630. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  631. 23234 access("/etc/ld.so.nohwcap", F_OK <unfinished ...>
  632. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1} <unfinished ...>
  633. 23234 <... access resumed> ) = -1 ENOENT (No such file or directory)
  634. 23231 <... fcntl resumed> ) = 0
  635. 23234 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
  636. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1} <unfinished ...>
  637. 23234 <... mmap resumed> ) = 0x7fbea8d8e000
  638. 23231 <... fcntl resumed> ) = 0
  639. 23234 access("/etc/ld.so.preload", R_OK <unfinished ...>
  640. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1} <unfinished ...>
  641. 23234 <... access resumed> ) = -1 ENOENT (No such file or directory)
  642. 23231 <... fcntl resumed> ) = 0
  643. 23234 open("/etc/ld.so.cache", O_RDONLY <unfinished ...>
  644. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1} <unfinished ...>
  645. 23234 <... open resumed> ) = 3
  646. 23231 <... fcntl resumed> ) = 0
  647. 23234 fstat(3, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  648. 23231 open("/var/run/ppp0.pid", O_WRONLY|O_CREAT|O_TRUNC, 0666 <unfinished ...>
  649. 23234 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 3, 0 <unfinished ...>
  650. 23231 <... open resumed> ) = 11
  651. 23234 <... mmap resumed> ) = 0x7fbea8d85000
  652. 23234 close(3 <unfinished ...>
  653. 23231 fstat(11, <unfinished ...>
  654. 23234 <... close resumed> ) = 0
  655. 23231 <... fstat resumed> {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
  656. 23234 access("/etc/ld.so.nohwcap", F_OK <unfinished ...>
  657. 23231 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
  658. 23234 <... access resumed> ) = -1 ENOENT (No such file or directory)
  659. 23231 <... mmap resumed> ) = 0x7fa68d2f2000
  660. 23234 open("/lib/x86_64-linux-gnu/libutil.so.1", O_RDONLY <unfinished ...>
  661. 23231 write(11, "23231\n", 6 <unfinished ...>
  662. 23234 <... open resumed> ) = 3
  663. 23231 <... write resumed> ) = 6
  664. 23234 read(3, <unfinished ...>
  665. 23231 close(11 <unfinished ...>
  666. 23234 <... read resumed> "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20\16\0\0\0\0\0\0@\0\0\0\0\0\0\0\20\"\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\36\0\35\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\300\26\0\0\0\0\0\0\300\26\0\0\0\0\0\0\300\26\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  667. 23231 <... close resumed> ) = 0
  668. 23234 fstat(3, <unfinished ...>
  669. 23231 munmap(0x7fa68d2f2000, 4096 <unfinished ...>
  670. 23234 <... fstat resumed> {st_mode=S_IFREG|0644, st_size=10640, ...}) = 0
  671. 23231 <... munmap resumed> ) = 0
  672. 23234 mmap(NULL, 2105608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0 <unfinished ...>
  673. 23231 time( <unfinished ...>
  674. 23234 <... mmap resumed> ) = 0x7fbea896e000
  675. 23231 <... time resumed> [1400247961]) = 1400247961
  676. 23234 mprotect(0x7fbea8970000, 2093056, PROT_NONE <unfinished ...>
  677. 23231 sendto(3, "<149>May 16 15:46:01 pppd[23231]: Connect: ppp0 <--> /dev/pts/9", 63, MSG_NOSIGNAL, NULL, 0 <unfinished ...>
  678. 23234 <... mprotect resumed> ) = 0
  679. 23231 <... sendto resumed> ) = 63
  680. 23234 mmap(0x7fbea8b6f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7fbea8b6f000
  681. 23234 close(3 <unfinished ...>
  682. 23231 write(2, "Connect: ppp0 <--> /dev/pts/9", 29 <unfinished ...>
  683. 23234 <... close resumed> ) = 0
  684. 23231 <... write resumed> ) = 29
  685. 23234 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  686. 23231 write(2, "\n", 1 <unfinished ...>
  687. 23234 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY <unfinished ...>
  688. 23231 <... write resumed> ) = 1
  689. 23234 <... open resumed> ) = 3
  690. 23231 ioctl(8, PPPIOCSXASYNCMAP <unfinished ...>
  691. 23234 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  692. 23231 <... ioctl resumed> , 0x69ab40) = 0
  693. 23234 fstat(3, <unfinished ...>
  694. 23231 ioctl(8, PPPIOCSASYNCMAP <unfinished ...>
  695. 23234 <... fstat resumed> {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  696. 23231 <... ioctl resumed> , 0x7fffea07b3cc) = 0
  697. 23234 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0 <unfinished ...>
  698. 23231 ioctl(8, PPPIOCGFLAGS <unfinished ...>
  699. 23234 <... mmap resumed> ) = 0x7fbea85e3000
  700. 23231 <... ioctl resumed> , 0x7fffea07b39c) = 0
  701. 23234 mprotect(0x7fbea8765000, 2093056, PROT_NONE <unfinished ...>
  702. 23231 ioctl(8, PPPIOCSFLAGS <unfinished ...>
  703. 23234 <... mprotect resumed> ) = 0
  704. 23231 <... ioctl resumed> , 0x7fffea07b39c) = 0
  705. 23234 mmap(0x7fbea8964000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x181000 <unfinished ...>
  706. 23231 ioctl(8, PPPIOCSMRU <unfinished ...>
  707. 23234 <... mmap resumed> ) = 0x7fbea8964000
  708. 23231 <... ioctl resumed> , 0x7fffea07b3dc) = 0
  709. 23234 mmap(0x7fbea8969000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0 <unfinished ...>
  710. 23231 ioctl(10, PPPIOCSMRU <unfinished ...>
  711. 23234 <... mmap resumed> ) = 0x7fbea8969000
  712. 23231 <... ioctl resumed> , 0x7fffea07b3dc) = 0
  713. 23234 close(3 <unfinished ...>
  714. 23231 ioctl(8, PPPIOCSRASYNCMAP <unfinished ...>
  715. 23234 <... close resumed> ) = 0
  716. 23231 <... ioctl resumed> , 0x7fffea07b3d8) = 0
  717. 23231 gettimeofday( <unfinished ...>
  718. 23234 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
  719. 23231 <... gettimeofday resumed> {1400247961, 555229}, NULL) = 0
  720. 23234 <... mmap resumed> ) = 0x7fbea8d84000
  721. 23231 rt_sigprocmask(SIG_BLOCK, NULL, <unfinished ...>
  722. 23234 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
  723. 23231 <... rt_sigprocmask resumed> [], 8) = 0
  724. 23234 <... mmap resumed> ) = 0x7fbea8d83000
  725. 23231 rt_sigprocmask(SIG_BLOCK, [HUP INT USR2 TERM CHLD], <unfinished ...>
  726. 23234 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
  727. 23231 <... rt_sigprocmask resumed> NULL, 8) = 0
  728. 23234 <... mmap resumed> ) = 0x7fbea8d82000
  729. 23231 rt_sigprocmask(SIG_UNBLOCK, [HUP INT USR2 TERM CHLD], <unfinished ...>
  730. 23234 arch_prctl(ARCH_SET_FS, 0x7fbea8d83700 <unfinished ...>
  731. 23231 <... rt_sigprocmask resumed> NULL, 8) = 0
  732. 23234 <... arch_prctl resumed> ) = 0
  733. 23231 gettimeofday({1400247961, 555491}, NULL) = 0
  734. 23231 select(11, [8 10], NULL, [8 10], {0, 999738} <unfinished ...>
  735. 23234 mprotect(0x7fbea8964000, 16384, PROT_READ) = 0
  736. 23234 mprotect(0x7fbea8b6f000, 4096, PROT_READ) = 0
  737. 23234 mprotect(0x7fbea8d90000, 4096, PROT_READ) = 0
  738. 23234 munmap(0x7fbea8d85000, 35560) = 0
  739. 23234 socket(PF_NETLINK, SOCK_RAW, 0) = 3
  740. 23234 bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
  741. 23234 getsockname(3, {sa_family=AF_NETLINK, pid=23234, groups=00000000}, [12]) = 0
  742. 23234 time(NULL) = 1400247961
  743. 23234 sendto(3, "\24\0\0\0\26\0\1\3\231\26vS\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
  744. 23234 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"0\0\0\0\24\0\2\0\231\26vS\302Z\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1\10\0\2\0\177\0\0\1\7\0\3\0lo\0\0<\0\0\0\24\0\2\0\231\26vS\302Z\0\0\2\30\200\0\2\0\0\0\10\0\1\0X\276\26q\10\0\2\0X\276\26q\10\0\4\0X\276\26\377\t\0\3\0eth0\0\0\0\0<\0\0\0\24\0\2\0\231\26vS\302Z\0\0\2 \200\0)\0\0\0\10\0\1\0\300\250\1\1\10\0\2\0\300\250\1\1\10\0\4\0\300\250\1\377\f\0\3\0vif22.0\0<\0\0\0\24\0\2\0\231\26vS\302Z\0\0\2 \200\0*\0\0\0\10\0\1\0\300\250\1\1"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 528
  745. 23234 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\231\26vS\302Z\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\24\0\6\0\377\377\377\377\377\377\377\377i\6\0\0i\6\0\0@\0\0\0\24\0\2\0\231\26vS\302Z\0\0\n@\200\375\2\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\272\254o\377\376\231z\35\24\0\6\0\377\377\377\377\377\377\377\377\337\7\0\0\337\7\0\0@\0\0\0\24\0\2\0\231\26vS\302Z\0\0\n@\200\375)\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\374\377\377\377\376\377\377\377\24\0\6\0\377\377\377\377\377\377\377\377\5\222\26\0\5\222\26\0@\0\0\0\24\0\2\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 576
  746. 23234 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\231\26vS\302Z\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\24\0\6\0\377\377\377\377\377\377\377\377i\6\0\0i\6\0\0@\0\0\0\24\0\2\0\231\26vS\302Z\0\0\n@\200\375\2\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\272\254o\377\376\231z\35\24\0\6\0\377\377\377\377\377\377\377\377\337\7\0\0\337\7\0\0@\0\0\0\24\0\2\0\231\26vS\302Z\0\0\n@\200\375)\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\374\377\377\377\376\377\377\377\24\0\6\0\377\377\377\377\377\377\377\377\5\222\26\0\5\222\26\0@\0\0\0\24\0\2\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
  747. 23234 close(3) = 0
  748. 23234 brk(0) = 0xc57000
  749. 23234 brk(0xc78000) = 0xc78000
  750. 23234 time([1400247961]) = 1400247961
  751. 23234 open("/etc/localtime", O_RDONLY) = 3
  752. 23234 fstat(3, {st_mode=S_IFREG|0644, st_size=2945, ...}) = 0
  753. 23234 fstat(3, {st_mode=S_IFREG|0644, st_size=2945, ...}) = 0
  754. 23234 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbea8d8d000
  755. 23234 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\0\0\0\f\0\0\0\0\0\0\0\267\0\0\0\f\0\0\0\33\221`P\213\233Gx\360\233\327,p\234\274\221p\235\300H\360\236\211\376p\237\240*\360\240`\245\360\241\200\f\360\242.\22\360\243zL\360\2445\201\360\245^#p\246%5\360\247'\233\360\250X&p\251\7}\360\251\3564p\252\347_\360\253\327P\360\254\307A\360\255\311\247\360\256\247#\360\257\240Op\260\207\5\360\261\211k\360\262p\"p\263r\210p\264P\4p\265I/\360\266/\346p\2672Lp\270\17\310p\270\377\271p\271\357\252p\272\326`\360\273\330\306\360\274\310\267\360\275\270\250\360"..., 4096) = 2945
  756. 23234 lseek(3, -1863, SEEK_CUR) = 1082
  757. 23234 read(3, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\r\0\0\0\r\0\0\0\0\0\0\0\270\0\0\0\r\0\0\0\37\377\377\377\377k\310J\213\377\377\377\377\221`P\213\377\377\377\377\233Gx\360\377\377\377\377\233\327,p\377\377\377\377\234\274\221p\377\377\377\377\235\300H\360\377\377\377\377\236\211\376p\377\377\377\377\237\240*\360\377\377\377\377\240`\245\360\377\377\377\377\241\200\f\360\377\377\377\377\242.\22\360\377\377\377\377\243zL\360\377\377\377\377\2445\201\360\377\377\377\377\245^#p\377\377\377\377\246%5\360\377\377\377\377\247'\233\360\377\377\377\377\250X&p\377\377\377\377\251\7}\360\377\377\377\377\251\3564p\377\377\377\377"..., 4096) = 1863
  758. 23234 close(3) = 0
  759. 23234 munmap(0x7fbea8d8d000, 4096) = 0
  760. 23234 getpid() = 23234
  761. 23234 socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
  762. 23234 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
  763. 23234 sendto(3, "<29>May 16 15:46:01 pptp[23234]: anon log[main:pptp.c:314]: The synchronous pptp option is NOT activated\n", 105, MSG_NOSIGNAL, NULL, 0) = 105
  764. 23234 socket(PF_INET, SOCK_RAW, 0x2f /* IPPROTO_??? */) = 4
  765. 23234 connect(4, {sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("212.83.184.133")}, 16) = 0
  766. 23234 close(1) = 0
  767. 23234 socket(PF_FILE, SOCK_STREAM, 0) = 1
  768. 23234 connect(1, {sa_family=AF_FILE, path="/var/run/pptp/255.255.255.255:212.83.184.133"}, 110) = -1 ENOENT (No such file or directory)
  769. 23234 unlink("/var/run/pptp/255.255.255.255:212.83.184.133") = -1 ENOENT (No such file or directory)
  770. 23234 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23237
  771. 23234 wait4(23237, <unfinished ...>
  772. 23237 close(1) = 0
  773. 23237 close(0) = 0
  774. 23237 close(4) = 0
  775. 23237 prctl(PR_SET_NAME, 0x40c5b0, 0, 0, 0) = 0
  776. 23237 pipe2([0, 1], O_CLOEXEC) = 0
  777. 23237 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23238
  778. 23237 close(1 <unfinished ...>
  779. 23238 close(0 <unfinished ...>
  780. 23237 <... close resumed> ) = 0
  781. 23238 <... close resumed> ) = 0
  782. 23237 fcntl(0, F_SETFD, 0 <unfinished ...>
  783. 23238 fcntl(1, F_SETFD, 0 <unfinished ...>
  784. 23237 <... fcntl resumed> ) = 0
  785. 23238 <... fcntl resumed> ) = 0
  786. 23238 execve("/bin/sh", ["sh", "-c", "/bin/ip route get 212.83.184.133"], [/* 15 vars */] <unfinished ...>
  787. 23237 fstat(0, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
  788. 23237 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbea8d8d000
  789. 23237 read(0, <unfinished ...>
  790. 23238 <... execve resumed> ) = 0
  791. 23238 brk(0) = 0x1059000
  792. 23238 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  793. 23238 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cea083000
  794. 23238 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  795. 23238 open("/etc/ld.so.cache", O_RDONLY) = 0
  796. 23238 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  797. 23238 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7f8cea07a000
  798. 23238 close(0) = 0
  799. 23238 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  800. 23238 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  801. 23238 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  802. 23238 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  803. 23238 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f8ce9adb000
  804. 23238 mprotect(0x7f8ce9c5d000, 2093056, PROT_NONE) = 0
  805. 23238 mmap(0x7f8ce9e5c000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7f8ce9e5c000
  806. 23238 mmap(0x7f8ce9e61000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f8ce9e61000
  807. 23238 close(0) = 0
  808. 23238 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cea079000
  809. 23238 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cea078000
  810. 23238 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8cea077000
  811. 23238 arch_prctl(ARCH_SET_FS, 0x7f8cea078700) = 0
  812. 23238 mprotect(0x7f8ce9e5c000, 16384, PROT_READ) = 0
  813. 23238 mprotect(0x7f8cea085000, 4096, PROT_READ) = 0
  814. 23238 munmap(0x7f8cea07a000, 35560) = 0
  815. 23238 getpid() = 23238
  816. 23238 rt_sigaction(SIGCHLD, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f8ce9b0d4f0}, NULL, 8) = 0
  817. 23238 geteuid() = 0
  818. 23238 brk(0) = 0x1059000
  819. 23238 brk(0x107a000) = 0x107a000
  820. 23238 getppid() = 23237
  821. 23238 stat("/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  822. 23238 stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  823. 23238 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
  824. 23238 rt_sigaction(SIGINT, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f8ce9b0d4f0}, NULL, 8) = 0
  825. 23238 rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
  826. 23238 rt_sigaction(SIGQUIT, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f8ce9b0d4f0}, NULL, 8) = 0
  827. 23238 rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
  828. 23238 rt_sigaction(SIGTERM, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f8ce9b0d4f0}, NULL, 8) = 0
  829. 23238 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f8cea0789d0) = 23239
  830. 23238 wait4(-1, <unfinished ...>
  831. 23239 execve("/bin/ip", ["/bin/ip", "route", "get", "212.83.184.133"], [/* 15 vars */]) = 0
  832. 23239 brk(0) = 0x1546000
  833. 23239 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  834. 23239 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffded468000
  835. 23239 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  836. 23239 open("/etc/ld.so.cache", O_RDONLY) = 0
  837. 23239 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  838. 23239 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7ffded45f000
  839. 23239 close(0) = 0
  840. 23239 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  841. 23239 open("/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY) = 0
  842. 23239 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3008\0\0\0\0\0\0@\0\0\0\0\0\0\0\2103\1\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\37\0\36\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  843. 23239 fstat(0, {st_mode=S_IFREG|0644, st_size=80712, ...}) = 0
  844. 23239 mmap(NULL, 2185864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7ffded035000
  845. 23239 mprotect(0x7ffded048000, 2093056, PROT_NONE) = 0
  846. 23239 mmap(0x7ffded247000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x12000) = 0x7ffded247000
  847. 23239 mmap(0x7ffded249000, 6792, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffded249000
  848. 23239 close(0) = 0
  849. 23239 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  850. 23239 open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY) = 0
  851. 23239 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0@\0\0\0\0\0\0\0\2601\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0 \0\37\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  852. 23239 fstat(0, {st_mode=S_IFREG|0644, st_size=14768, ...}) = 0
  853. 23239 mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7ffdece31000
  854. 23239 mprotect(0x7ffdece33000, 2097152, PROT_NONE) = 0
  855. 23239 mmap(0x7ffded033000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x2000) = 0x7ffded033000
  856. 23239 close(0) = 0
  857. 23239 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  858. 23239 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  859. 23239 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  860. 23239 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  861. 23239 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffded45e000
  862. 23239 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7ffdecaa6000
  863. 23239 mprotect(0x7ffdecc28000, 2093056, PROT_NONE) = 0
  864. 23239 mmap(0x7ffdece27000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7ffdece27000
  865. 23239 mmap(0x7ffdece2c000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ffdece2c000
  866. 23239 close(0) = 0
  867. 23239 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffded45d000
  868. 23239 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffded45c000
  869. 23239 arch_prctl(ARCH_SET_FS, 0x7ffded45d700) = 0
  870. 23239 mprotect(0x7ffdece27000, 16384, PROT_READ) = 0
  871. 23239 mprotect(0x7ffded033000, 4096, PROT_READ) = 0
  872. 23239 mprotect(0x7ffded247000, 4096, PROT_READ) = 0
  873. 23239 mprotect(0x7ffded46a000, 4096, PROT_READ) = 0
  874. 23239 munmap(0x7ffded45f000, 35560) = 0
  875. 23239 socket(PF_NETLINK, SOCK_RAW, 0) = 0
  876. 23239 setsockopt(0, SOL_SOCKET, SO_SNDBUF, [32768], 4) = 0
  877. 23239 setsockopt(0, SOL_SOCKET, SO_RCVBUF, [1048576], 4) = 0
  878. 23239 bind(0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
  879. 23239 getsockname(0, {sa_family=AF_NETLINK, pid=23239, groups=00000000}, [12]) = 0
  880. 23239 time(NULL) = 1400247961
  881. 23239 sendto(0, "\34\0\0\0\22\0\1\3\232\26vS\0\0\0\0\0\0\0\0\10\0\35\0\1\0\0\0", 28, 0, NULL, 0) = 28
  882. 23239 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\344\3\0\0\20\0\2\0\232\26vS\307Z\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0\7\0\3\0lo\0\0\10\0\r\0\0\0\0\0\5\0\20\0\0\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0004@\0\0\10\0\33\0\0\0\0\0\f\0\6\0noqueue\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\0\0\0\0\0\0\0\0\n\0\2\0\0\0\0\0\0\0\0\0`\0\7\0\376D\373\1\376D\373\1\331\26'\222\331\26'\222\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 2988
  883. 23239 brk(0) = 0x1546000
  884. 23239 brk(0x1567000) = 0x1567000
  885. 23239 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\370\3\0\0\20\0\2\0\232\26vS\307Z\0\0\0\0\1\0\4\0\0\0\202\0\0\0\0\0\0\0\v\0\3\0dummy0\0\0\10\0\r\0\0\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0J\362\246U\267j\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3024
  886. 23239 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\232\26vS\307Z\0\0\0\0\1\0.\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif26.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0006\n4\4\315x\30\4P\360\213\327\321\235\324!\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3012
  887. 23239 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\232\26vS\307Z\0\0\0\0\1\0001\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif28.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\337\270F\2\253\377%\4h\21\300\245\347\201\270R\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3096
  888. 23239 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\320\3\0\0\20\0\2\0\232\26vS\307Z\0\0\0\0\0\2R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 976
  889. 23239 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\232\26vS\307Z\0\0\0\0\0\0R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 20
  890. 23239 sendmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"$\0\0\0\32\0\1\0\233\26vS\0\0\0\0\2 \0\0\0\0\0\0\0\0\0\0\10\0\1\0\324S\270\205", 36}], msg_controllen=0, msg_flags=0}, 0) = 36
  891. 23239 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"h\0\0\0\30\0\0\0\233\26vS\307Z\0\0\2 \0\0\376\0\0\1\0\2\0\0\10\0\17\0\376\0\0\0\10\0\1\0\324S\270\205\10\0\4\0\2\0\0\0\10\0\7\0X\276\26q\10\0\5\0X\276\26\1$\0\f\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 104
  892. 23239 fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
  893. 23239 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ffded467000
  894. 23239 write(1, "212.83.184.133 via 88.190.22.1 dev eth0 src 88.190.22.113 \n cache \n", 71) = 71
  895. 23237 <... read resumed> "212.83.184.133 via 88.190.22.1 dev eth0 src 88.190.22.113 \n cache \n", 4096) = 71
  896. 23239 exit_group(0) = ?
  897. 23237 close(0) = 0
  898. 23237 wait4(23238, <unfinished ...>
  899. 23238 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23239
  900. 23238 --- SIGCHLD (Child exited) @ 0 (0) ---
  901. 23238 rt_sigreturn(0x11) = 23239
  902. 23238 exit_group(0) = ?
  903. 23237 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23238
  904. 23237 --- SIGCHLD (Child exited) @ 0 (0) ---
  905. 23237 munmap(0x7fbea8d8d000, 4096) = 0
  906. 23237 pipe2([0, 1], O_CLOEXEC) = 0
  907. 23237 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23240
  908. 23237 close(1 <unfinished ...>
  909. 23240 close(0 <unfinished ...>
  910. 23237 <... close resumed> ) = 0
  911. 23240 <... close resumed> ) = 0
  912. 23237 fcntl(0, F_SETFD, 0 <unfinished ...>
  913. 23240 fcntl(1, F_SETFD, 0 <unfinished ...>
  914. 23237 <... fcntl resumed> ) = 0
  915. 23240 <... fcntl resumed> ) = 0
  916. 23240 execve("/bin/sh", ["sh", "-c", "/bin/ip route replace 212.83.184.133 via 88.190.22.1 dev eth0 src 88.190.22.113 \n"], [/* 15 vars */] <unfinished ...>
  917. 23237 close(0) = 0
  918. 23237 wait4(23240, <unfinished ...>
  919. 23240 <... execve resumed> ) = 0
  920. 23240 brk(0) = 0x15bc000
  921. 23240 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  922. 23240 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f900aff2000
  923. 23240 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  924. 23240 open("/etc/ld.so.cache", O_RDONLY) = 0
  925. 23240 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  926. 23240 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7f900afe9000
  927. 23240 close(0) = 0
  928. 23240 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  929. 23240 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  930. 23240 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  931. 23240 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  932. 23240 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f900aa4a000
  933. 23240 mprotect(0x7f900abcc000, 2093056, PROT_NONE) = 0
  934. 23240 mmap(0x7f900adcb000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7f900adcb000
  935. 23240 mmap(0x7f900add0000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f900add0000
  936. 23240 close(0) = 0
  937. 23240 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f900afe8000
  938. 23240 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f900afe7000
  939. 23240 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f900afe6000
  940. 23240 arch_prctl(ARCH_SET_FS, 0x7f900afe7700) = 0
  941. 23240 mprotect(0x7f900adcb000, 16384, PROT_READ) = 0
  942. 23240 mprotect(0x7f900aff4000, 4096, PROT_READ) = 0
  943. 23240 munmap(0x7f900afe9000, 35560) = 0
  944. 23240 getpid() = 23240
  945. 23240 rt_sigaction(SIGCHLD, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f900aa7c4f0}, NULL, 8) = 0
  946. 23240 geteuid() = 0
  947. 23240 brk(0) = 0x15bc000
  948. 23240 brk(0x15dd000) = 0x15dd000
  949. 23240 getppid() = 23237
  950. 23240 stat("/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  951. 23240 stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  952. 23240 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
  953. 23240 rt_sigaction(SIGINT, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f900aa7c4f0}, NULL, 8) = 0
  954. 23240 rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
  955. 23240 rt_sigaction(SIGQUIT, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f900aa7c4f0}, NULL, 8) = 0
  956. 23240 rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
  957. 23240 rt_sigaction(SIGTERM, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f900aa7c4f0}, NULL, 8) = 0
  958. 23240 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f900afe79d0) = 23241
  959. 23240 wait4(-1, <unfinished ...>
  960. 23241 execve("/bin/ip", ["/bin/ip", "route", "replace", "212.83.184.133", "via", "88.190.22.1", "dev", "eth0", "src", "88.190.22.113"], [/* 15 vars */]) = 0
  961. 23241 brk(0) = 0xba5000
  962. 23241 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  963. 23241 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faa5430b000
  964. 23241 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  965. 23241 open("/etc/ld.so.cache", O_RDONLY) = 0
  966. 23241 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  967. 23241 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7faa54302000
  968. 23241 close(0) = 0
  969. 23241 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  970. 23241 open("/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY) = 0
  971. 23241 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3008\0\0\0\0\0\0@\0\0\0\0\0\0\0\2103\1\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\37\0\36\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  972. 23241 fstat(0, {st_mode=S_IFREG|0644, st_size=80712, ...}) = 0
  973. 23241 mmap(NULL, 2185864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7faa53ed8000
  974. 23241 mprotect(0x7faa53eeb000, 2093056, PROT_NONE) = 0
  975. 23241 mmap(0x7faa540ea000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x12000) = 0x7faa540ea000
  976. 23241 mmap(0x7faa540ec000, 6792, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7faa540ec000
  977. 23241 close(0) = 0
  978. 23241 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  979. 23241 open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY) = 0
  980. 23241 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0@\0\0\0\0\0\0\0\2601\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0 \0\37\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  981. 23241 fstat(0, {st_mode=S_IFREG|0644, st_size=14768, ...}) = 0
  982. 23241 mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7faa53cd4000
  983. 23241 mprotect(0x7faa53cd6000, 2097152, PROT_NONE) = 0
  984. 23241 mmap(0x7faa53ed6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x2000) = 0x7faa53ed6000
  985. 23241 close(0) = 0
  986. 23241 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  987. 23241 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  988. 23241 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  989. 23241 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  990. 23241 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faa54301000
  991. 23241 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7faa53949000
  992. 23241 mprotect(0x7faa53acb000, 2093056, PROT_NONE) = 0
  993. 23241 mmap(0x7faa53cca000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7faa53cca000
  994. 23241 mmap(0x7faa53ccf000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7faa53ccf000
  995. 23241 close(0) = 0
  996. 23241 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faa54300000
  997. 23241 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faa542ff000
  998. 23241 arch_prctl(ARCH_SET_FS, 0x7faa54300700) = 0
  999. 23241 mprotect(0x7faa53cca000, 16384, PROT_READ) = 0
  1000. 23241 mprotect(0x7faa53ed6000, 4096, PROT_READ) = 0
  1001. 23241 mprotect(0x7faa540ea000, 4096, PROT_READ) = 0
  1002. 23241 mprotect(0x7faa5430d000, 4096, PROT_READ) = 0
  1003. 23241 munmap(0x7faa54302000, 35560) = 0
  1004. 23241 socket(PF_NETLINK, SOCK_RAW, 0) = 0
  1005. 23241 setsockopt(0, SOL_SOCKET, SO_SNDBUF, [32768], 4) = 0
  1006. 23241 setsockopt(0, SOL_SOCKET, SO_RCVBUF, [1048576], 4) = 0
  1007. 23241 bind(0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
  1008. 23241 getsockname(0, {sa_family=AF_NETLINK, pid=23241, groups=00000000}, [12]) = 0
  1009. 23241 time(NULL) = 1400247961
  1010. 23241 sendto(0, "\34\0\0\0\22\0\1\3\232\26vS\0\0\0\0\0\0\0\0\10\0\35\0\1\0\0\0", 28, 0, NULL, 0) = 28
  1011. 23241 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\344\3\0\0\20\0\2\0\232\26vS\311Z\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0\7\0\3\0lo\0\0\10\0\r\0\0\0\0\0\5\0\20\0\0\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0004@\0\0\10\0\33\0\0\0\0\0\f\0\6\0noqueue\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\0\0\0\0\0\0\0\0\n\0\2\0\0\0\0\0\0\0\0\0`\0\7\0\376D\373\1\376D\373\1\331\26'\222\331\26'\222\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 2988
  1012. 23241 brk(0) = 0xba5000
  1013. 23241 brk(0xbc6000) = 0xbc6000
  1014. 23241 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\370\3\0\0\20\0\2\0\232\26vS\311Z\0\0\0\0\1\0\4\0\0\0\202\0\0\0\0\0\0\0\v\0\3\0dummy0\0\0\10\0\r\0\0\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0J\362\246U\267j\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3024
  1015. 23241 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\232\26vS\311Z\0\0\0\0\1\0.\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif26.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0006\n4\4\315x\30\4P\360\213\327\321\235\324!\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3012
  1016. 23241 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\232\26vS\311Z\0\0\0\0\1\0001\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif28.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\337\270F\2\253\377%\4h\21\300\245\347\201\270R\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3096
  1017. 23241 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\320\3\0\0\20\0\2\0\232\26vS\311Z\0\0\0\0\0\2R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 976
  1018. 23241 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\232\26vS\311Z\0\0\0\0\0\0R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 20
  1019. 23241 sendmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"<\0\0\0\30\0\5\5\233\26vS\0\0\0\0\2 \0\0\376\3\0\1\0\0\0\0\10\0\1\0\324S\270\205\10\0\5\0X\276\26\1\10\0\7\0X\276\26q\10\0\4\0\2\0\0\0", 60}], msg_controllen=0, msg_flags=0}, 0) = 60
  1020. 23241 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"$\0\0\0\2\0\0\0\233\26vS\311Z\0\0\0\0\0\0<\0\0\0\30\0\5\5\233\26vS\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 36
  1021. 23241 exit_group(0) = ?
  1022. 23240 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23241
  1023. 23240 --- SIGCHLD (Child exited) @ 0 (0) ---
  1024. 23240 rt_sigreturn(0x11) = 23241
  1025. 23240 exit_group(0) = ?
  1026. 23237 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23240
  1027. 23237 --- SIGCHLD (Child exited) @ 0 (0) ---
  1028. 23237 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 0
  1029. 23237 connect(0, {sa_family=AF_INET, sin_port=htons(1723), sin_addr=inet_addr("212.83.184.133")}, 16) = 0
  1030. 23237 socket(PF_FILE, SOCK_STREAM, 0) = 1
  1031. 23237 stat("/var/run/pptp/255.255.255.255:212.83.184.133", 0x7fff49dc8fd0) = -1 ENOENT (No such file or directory)
  1032. 23237 stat("/var/run/pptp", {st_mode=S_IFDIR|0750, st_size=40, ...}) = 0
  1033. 23237 bind(1, {sa_family=AF_FILE, path="/var/run/pptp/255.255.255.255:212.83.184.133"}, 110) = 0
  1034. 23237 chmod("/var/run/pptp/255.255.255.255:212.83.184.133", 0777) = 0
  1035. 23237 listen(1, 127) = 0
  1036. 23237 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23242
  1037. 23237 close(3) = 0
  1038. 23237 exit_group(0) = ?
  1039. 23242 open("/dev/null", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 4
  1040. 23242 dup2(4, 2) = 2
  1041. 23234 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23237
  1042. 23234 --- SIGCHLD (Child exited) @ 0 (0) ---
  1043. 23242 close(4 <unfinished ...>
  1044. 23234 rt_sigprocmask(SIG_BLOCK, [CHLD], <unfinished ...>
  1045. 23242 <... close resumed> ) = 0
  1046. 23234 <... rt_sigprocmask resumed> [], 8) = 0
  1047. 23242 rt_sigprocmask(SIG_BLOCK, NULL, <unfinished ...>
  1048. 23234 rt_sigaction(SIGCHLD, NULL, <unfinished ...>
  1049. 23242 <... rt_sigprocmask resumed> [], 8) = 0
  1050. 23234 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
  1051. 23242 rt_sigaction(SIGINT, {0x40a4dc, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, <unfinished ...>
  1052. 23234 rt_sigprocmask(SIG_SETMASK, [], <unfinished ...>
  1053. 23242 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
  1054. 23234 <... rt_sigprocmask resumed> NULL, 8) = 0
  1055. 23242 rt_sigaction(SIGTERM, {0x40a4dc, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, <unfinished ...>
  1056. 23234 nanosleep({1, 0}, <unfinished ...>
  1057. 23242 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
  1058. 23242 rt_sigaction(SIGPIPE, {0x40a4f6, [PIPE], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {SIG_IGN, [], 0}, 8) = 0
  1059. 23242 rt_sigaction(SIGUSR1, {0x40a4f6, [USR1], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {SIG_DFL, [], 0}, 8) = 0
  1060. 23242 fcntl(0, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
  1061. 23242 write(0, "\0\234\0\1\32+<M\0\1\0\0\1\0\0\0\0\0\0\3\0\0\0\3\377\377\0\1local\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0cananian\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 156) = 156
  1062. 23242 time([1400247961]) = 1400247961
  1063. 23242 sendto(3, "<29>May 16 15:46:01 pptp[23242]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'\n", 135, MSG_NOSIGNAL, NULL, 0) = 135
  1064. 23242 pipe([4, 5]) = 0
  1065. 23242 fcntl(4, F_SETFD, FD_CLOEXEC) = 0
  1066. 23242 fcntl(5, F_SETFD, FD_CLOEXEC) = 0
  1067. 23242 fcntl(5, F_GETFL) = 0x1 (flags O_WRONLY)
  1068. 23242 fcntl(5, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
  1069. 23242 rt_sigaction(SIGALRM, {0x409239, [], SA_RESTORER, 0x7fbea86154f0}, NULL, 8) = 0
  1070. 23242 setitimer(ITIMER_REAL, {it_interval={0, 0}, it_value={60, 0}}, NULL) = 0
  1071. 23242 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  1072. 23242 select(5, [0 4], [], NULL, NULL) = 1 (in [0])
  1073. 23242 read(0, 0xc575a0, 512) = -1 ECONNRESET (Connection reset by peer)
  1074. 23242 time([1400247961]) = 1400247961
  1075. 23242 sendto(3, "<29>May 16 15:46:01 pptp[23242]: anon log[pptp_read_some:pptp_ctrl.c:551]: read error: Connection reset by peer", 111, MSG_NOSIGNAL, NULL, 0) = 111
  1076. 23242 rt_sigaction(SIGINT, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4dc, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1077. 23242 rt_sigaction(SIGTERM, {0x40a4f6, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4dc, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1078. 23242 select(5, [0 4], [], NULL, {0, 0}) = 1 (in [0], left {0, 0})
  1079. 23242 read(0, "", 512) = 0
  1080. 23242 time([1400247961]) = 1400247961
  1081. 23242 sendto(3, "<29>May 16 15:46:01 pptp[23242]: anon log[pptp_read_some:pptp_ctrl.c:544]: read returned zero, peer has closed", 110, MSG_NOSIGNAL, NULL, 0) = 110
  1082. 23242 close(4) = 0
  1083. 23242 close(5) = 0
  1084. 23242 close(0) = 0
  1085. 23242 rt_sigaction(SIGINT, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1086. 23242 rt_sigaction(SIGTERM, {0x40a4f6, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4f6, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1087. 23242 close(0) = -1 EBADF (Bad file descriptor)
  1088. 23242 close(1) = 0
  1089. 23242 unlink("/var/run/pptp/255.255.255.255:212.83.184.133") = 0
  1090. 23242 close(3) = 0
  1091. 23242 exit_group(0) = ?
  1092. 23231 <... select resumed> ) = 0 (Timeout)
  1093. 23231 gettimeofday({1400247962, 556562}, NULL) = 0
  1094. 23231 time([1400247962]) = 1400247962
  1095. 23231 sendto(3, "<151>May 16 15:46:02 pppd[23231]: sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xc98d0d39> <pcomp> <accomp>]", 110, MSG_NOSIGNAL, NULL, 0) = 110
  1096. 23231 write(2, "sent [LCP ConfReq id=0x1 <asyncmap 0x0> <magic 0xc98d0d39> <pcomp> <accomp>]", 76) = 76
  1097. 23231 write(2, "\n", 1) = 1
  1098. 23231 write(8, "\300!\1\1\0\24\2\6\0\0\0\0\5\6\311\215\r9\7\2\10\2", 22) = 22
  1099. 23231 gettimeofday({1400247962, 557377}, NULL) = 0
  1100. 23231 gettimeofday({1400247962, 557431}, NULL) = 0
  1101. 23231 read(8, 0x653fa2, 1502) = -1 EAGAIN (Resource temporarily unavailable)
  1102. 23231 read(10, 0x653fa2, 1502) = -1 EAGAIN (Resource temporarily unavailable)
  1103. 23231 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  1104. 23231 rt_sigprocmask(SIG_BLOCK, [HUP INT USR2 TERM CHLD], NULL, 8) = 0
  1105. 23231 rt_sigprocmask(SIG_UNBLOCK, [HUP INT USR2 TERM CHLD], NULL, 8) = 0
  1106. 23231 gettimeofday({1400247962, 557763}, NULL) = 0
  1107. 23231 select(11, [8 10], NULL, [8 10], {2, 999614} <unfinished ...>
  1108. 23234 <... nanosleep resumed> 0x7fff49dc94a0) = 0
  1109. 23234 connect(1, {sa_family=AF_FILE, path="/var/run/pptp/255.255.255.255:212.83.184.133"}, 110) = -1 ENOENT (No such file or directory)
  1110. 23234 unlink("/var/run/pptp/255.255.255.255:212.83.184.133") = -1 ENOENT (No such file or directory)
  1111. 23234 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23243
  1112. 23234 wait4(23243, <unfinished ...>
  1113. 23243 close(1) = 0
  1114. 23243 close(0) = 0
  1115. 23243 close(4) = 0
  1116. 23243 prctl(PR_SET_NAME, 0x40c5b0, 0, 0, 0) = 0
  1117. 23243 pipe2([0, 1], O_CLOEXEC) = 0
  1118. 23243 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23244
  1119. 23243 close(1 <unfinished ...>
  1120. 23244 close(0 <unfinished ...>
  1121. 23243 <... close resumed> ) = 0
  1122. 23244 <... close resumed> ) = 0
  1123. 23243 fcntl(0, F_SETFD, 0 <unfinished ...>
  1124. 23244 fcntl(1, F_SETFD, 0 <unfinished ...>
  1125. 23243 <... fcntl resumed> ) = 0
  1126. 23244 <... fcntl resumed> ) = 0
  1127. 23244 execve("/bin/sh", ["sh", "-c", "/bin/ip route get 212.83.184.133"], [/* 15 vars */] <unfinished ...>
  1128. 23243 fstat(0, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
  1129. 23243 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbea8d8d000
  1130. 23243 read(0, <unfinished ...>
  1131. 23244 <... execve resumed> ) = 0
  1132. 23244 brk(0) = 0x154f000
  1133. 23244 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1134. 23244 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f81428ad000
  1135. 23244 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  1136. 23244 open("/etc/ld.so.cache", O_RDONLY) = 0
  1137. 23244 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  1138. 23244 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7f81428a4000
  1139. 23244 close(0) = 0
  1140. 23244 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1141. 23244 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  1142. 23244 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1143. 23244 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  1144. 23244 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f8142305000
  1145. 23244 mprotect(0x7f8142487000, 2093056, PROT_NONE) = 0
  1146. 23244 mmap(0x7f8142686000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7f8142686000
  1147. 23244 mmap(0x7f814268b000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f814268b000
  1148. 23244 close(0) = 0
  1149. 23244 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f81428a3000
  1150. 23244 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f81428a2000
  1151. 23244 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f81428a1000
  1152. 23244 arch_prctl(ARCH_SET_FS, 0x7f81428a2700) = 0
  1153. 23244 mprotect(0x7f8142686000, 16384, PROT_READ) = 0
  1154. 23244 mprotect(0x7f81428af000, 4096, PROT_READ) = 0
  1155. 23244 munmap(0x7f81428a4000, 35560) = 0
  1156. 23244 getpid() = 23244
  1157. 23244 rt_sigaction(SIGCHLD, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f81423374f0}, NULL, 8) = 0
  1158. 23244 geteuid() = 0
  1159. 23244 brk(0) = 0x154f000
  1160. 23244 brk(0x1570000) = 0x1570000
  1161. 23244 getppid() = 23243
  1162. 23244 stat("/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  1163. 23244 stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  1164. 23244 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
  1165. 23244 rt_sigaction(SIGINT, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f81423374f0}, NULL, 8) = 0
  1166. 23244 rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
  1167. 23244 rt_sigaction(SIGQUIT, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f81423374f0}, NULL, 8) = 0
  1168. 23244 rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
  1169. 23244 rt_sigaction(SIGTERM, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f81423374f0}, NULL, 8) = 0
  1170. 23244 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f81428a29d0) = 23245
  1171. 23244 wait4(-1, <unfinished ...>
  1172. 23245 execve("/bin/ip", ["/bin/ip", "route", "get", "212.83.184.133"], [/* 15 vars */]) = 0
  1173. 23245 brk(0) = 0x1a8f000
  1174. 23245 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1175. 23245 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f07110000
  1176. 23245 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  1177. 23245 open("/etc/ld.so.cache", O_RDONLY) = 0
  1178. 23245 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  1179. 23245 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7f4f07107000
  1180. 23245 close(0) = 0
  1181. 23245 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1182. 23245 open("/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY) = 0
  1183. 23245 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3008\0\0\0\0\0\0@\0\0\0\0\0\0\0\2103\1\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\37\0\36\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1184. 23245 fstat(0, {st_mode=S_IFREG|0644, st_size=80712, ...}) = 0
  1185. 23245 mmap(NULL, 2185864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f4f06cdd000
  1186. 23245 mprotect(0x7f4f06cf0000, 2093056, PROT_NONE) = 0
  1187. 23245 mmap(0x7f4f06eef000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x12000) = 0x7f4f06eef000
  1188. 23245 mmap(0x7f4f06ef1000, 6792, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4f06ef1000
  1189. 23245 close(0) = 0
  1190. 23245 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1191. 23245 open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY) = 0
  1192. 23245 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0@\0\0\0\0\0\0\0\2601\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0 \0\37\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1193. 23245 fstat(0, {st_mode=S_IFREG|0644, st_size=14768, ...}) = 0
  1194. 23245 mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f4f06ad9000
  1195. 23245 mprotect(0x7f4f06adb000, 2097152, PROT_NONE) = 0
  1196. 23245 mmap(0x7f4f06cdb000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x2000) = 0x7f4f06cdb000
  1197. 23245 close(0) = 0
  1198. 23245 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1199. 23245 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  1200. 23245 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1201. 23245 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  1202. 23245 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f07106000
  1203. 23245 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f4f0674e000
  1204. 23245 mprotect(0x7f4f068d0000, 2093056, PROT_NONE) = 0
  1205. 23245 mmap(0x7f4f06acf000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7f4f06acf000
  1206. 23245 mmap(0x7f4f06ad4000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f4f06ad4000
  1207. 23245 close(0) = 0
  1208. 23245 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f07105000
  1209. 23245 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f07104000
  1210. 23245 arch_prctl(ARCH_SET_FS, 0x7f4f07105700) = 0
  1211. 23245 mprotect(0x7f4f06acf000, 16384, PROT_READ) = 0
  1212. 23245 mprotect(0x7f4f06cdb000, 4096, PROT_READ) = 0
  1213. 23245 mprotect(0x7f4f06eef000, 4096, PROT_READ) = 0
  1214. 23245 mprotect(0x7f4f07112000, 4096, PROT_READ) = 0
  1215. 23245 munmap(0x7f4f07107000, 35560) = 0
  1216. 23245 socket(PF_NETLINK, SOCK_RAW, 0) = 0
  1217. 23245 setsockopt(0, SOL_SOCKET, SO_SNDBUF, [32768], 4) = 0
  1218. 23245 setsockopt(0, SOL_SOCKET, SO_RCVBUF, [1048576], 4) = 0
  1219. 23245 bind(0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
  1220. 23245 getsockname(0, {sa_family=AF_NETLINK, pid=23245, groups=00000000}, [12]) = 0
  1221. 23245 time(NULL) = 1400247962
  1222. 23245 sendto(0, "\34\0\0\0\22\0\1\3\233\26vS\0\0\0\0\0\0\0\0\10\0\35\0\1\0\0\0", 28, 0, NULL, 0) = 28
  1223. 23245 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\344\3\0\0\20\0\2\0\233\26vS\315Z\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0\7\0\3\0lo\0\0\10\0\r\0\0\0\0\0\5\0\20\0\0\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0004@\0\0\10\0\33\0\0\0\0\0\f\0\6\0noqueue\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\0\0\0\0\0\0\0\0\n\0\2\0\0\0\0\0\0\0\0\0`\0\7\0\376D\373\1\376D\373\1\331\26'\222\331\26'\222\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 2988
  1224. 23245 brk(0) = 0x1a8f000
  1225. 23245 brk(0x1ab0000) = 0x1ab0000
  1226. 23245 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\370\3\0\0\20\0\2\0\233\26vS\315Z\0\0\0\0\1\0\4\0\0\0\202\0\0\0\0\0\0\0\v\0\3\0dummy0\0\0\10\0\r\0\0\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0J\362\246U\267j\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3024
  1227. 23245 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\233\26vS\315Z\0\0\0\0\1\0.\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif26.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0006\n4\4\315x\30\4P\360\213\327\321\235\324!\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3012
  1228. 23245 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\233\26vS\315Z\0\0\0\0\1\0001\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif28.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\341\270F\2\255\377%\4\320\21\300\245\v\203\270R\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3096
  1229. 23245 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\320\3\0\0\20\0\2\0\233\26vS\315Z\0\0\0\0\0\2R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 976
  1230. 23245 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\233\26vS\315Z\0\0\0\0\0\0R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 20
  1231. 23245 sendmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"$\0\0\0\32\0\1\0\234\26vS\0\0\0\0\2 \0\0\0\0\0\0\0\0\0\0\10\0\1\0\324S\270\205", 36}], msg_controllen=0, msg_flags=0}, 0) = 36
  1232. 23245 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"h\0\0\0\30\0\0\0\234\26vS\315Z\0\0\2 \0\0\376\0\0\1\0\2\0\0\10\0\17\0\376\0\0\0\10\0\1\0\324S\270\205\10\0\4\0\2\0\0\0\10\0\7\0X\276\26q\10\0\5\0X\276\26\1$\0\f\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\3\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 104
  1233. 23245 fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
  1234. 23245 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f4f0710f000
  1235. 23245 write(1, "212.83.184.133 via 88.190.22.1 dev eth0 src 88.190.22.113 \n cache \n", 71) = 71
  1236. 23243 <... read resumed> "212.83.184.133 via 88.190.22.1 dev eth0 src 88.190.22.113 \n cache \n", 4096) = 71
  1237. 23245 exit_group(0) = ?
  1238. 23243 close(0) = 0
  1239. 23243 wait4(23244, <unfinished ...>
  1240. 23244 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23245
  1241. 23244 --- SIGCHLD (Child exited) @ 0 (0) ---
  1242. 23244 rt_sigreturn(0x11) = 23245
  1243. 23244 exit_group(0) = ?
  1244. 23243 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23244
  1245. 23243 --- SIGCHLD (Child exited) @ 0 (0) ---
  1246. 23243 munmap(0x7fbea8d8d000, 4096) = 0
  1247. 23243 pipe2([0, 1], O_CLOEXEC) = 0
  1248. 23243 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23246
  1249. 23243 close(1 <unfinished ...>
  1250. 23246 close(0 <unfinished ...>
  1251. 23243 <... close resumed> ) = 0
  1252. 23246 <... close resumed> ) = 0
  1253. 23243 fcntl(0, F_SETFD, 0 <unfinished ...>
  1254. 23246 fcntl(1, F_SETFD, 0 <unfinished ...>
  1255. 23243 <... fcntl resumed> ) = 0
  1256. 23246 <... fcntl resumed> ) = 0
  1257. 23246 execve("/bin/sh", ["sh", "-c", "/bin/ip route replace 212.83.184.133 via 88.190.22.1 dev eth0 src 88.190.22.113 \n"], [/* 15 vars */] <unfinished ...>
  1258. 23243 close(0) = 0
  1259. 23243 wait4(23246, <unfinished ...>
  1260. 23246 <... execve resumed> ) = 0
  1261. 23246 brk(0) = 0x1c3b000
  1262. 23246 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1263. 23246 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9aa9f7000
  1264. 23246 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  1265. 23246 open("/etc/ld.so.cache", O_RDONLY) = 0
  1266. 23246 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  1267. 23246 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7fd9aa9ee000
  1268. 23246 close(0) = 0
  1269. 23246 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1270. 23246 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  1271. 23246 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1272. 23246 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  1273. 23246 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7fd9aa44f000
  1274. 23246 mprotect(0x7fd9aa5d1000, 2093056, PROT_NONE) = 0
  1275. 23246 mmap(0x7fd9aa7d0000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7fd9aa7d0000
  1276. 23246 mmap(0x7fd9aa7d5000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7fd9aa7d5000
  1277. 23246 close(0) = 0
  1278. 23246 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9aa9ed000
  1279. 23246 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9aa9ec000
  1280. 23246 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fd9aa9eb000
  1281. 23246 arch_prctl(ARCH_SET_FS, 0x7fd9aa9ec700) = 0
  1282. 23246 mprotect(0x7fd9aa7d0000, 16384, PROT_READ) = 0
  1283. 23246 mprotect(0x7fd9aa9f9000, 4096, PROT_READ) = 0
  1284. 23246 munmap(0x7fd9aa9ee000, 35560) = 0
  1285. 23246 getpid() = 23246
  1286. 23246 rt_sigaction(SIGCHLD, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7fd9aa4814f0}, NULL, 8) = 0
  1287. 23246 geteuid() = 0
  1288. 23246 brk(0) = 0x1c3b000
  1289. 23246 brk(0x1c5c000) = 0x1c5c000
  1290. 23246 getppid() = 23243
  1291. 23246 stat("/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  1292. 23246 stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  1293. 23246 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
  1294. 23246 rt_sigaction(SIGINT, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7fd9aa4814f0}, NULL, 8) = 0
  1295. 23246 rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
  1296. 23246 rt_sigaction(SIGQUIT, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7fd9aa4814f0}, NULL, 8) = 0
  1297. 23246 rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
  1298. 23246 rt_sigaction(SIGTERM, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7fd9aa4814f0}, NULL, 8) = 0
  1299. 23246 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fd9aa9ec9d0) = 23247
  1300. 23246 wait4(-1, <unfinished ...>
  1301. 23247 execve("/bin/ip", ["/bin/ip", "route", "replace", "212.83.184.133", "via", "88.190.22.1", "dev", "eth0", "src", "88.190.22.113"], [/* 15 vars */]) = 0
  1302. 23247 brk(0) = 0x6b3000
  1303. 23247 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1304. 23247 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27d6043000
  1305. 23247 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  1306. 23247 open("/etc/ld.so.cache", O_RDONLY) = 0
  1307. 23247 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  1308. 23247 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7f27d603a000
  1309. 23247 close(0) = 0
  1310. 23247 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1311. 23247 open("/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY) = 0
  1312. 23247 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3008\0\0\0\0\0\0@\0\0\0\0\0\0\0\2103\1\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\37\0\36\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1313. 23247 fstat(0, {st_mode=S_IFREG|0644, st_size=80712, ...}) = 0
  1314. 23247 mmap(NULL, 2185864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f27d5c10000
  1315. 23247 mprotect(0x7f27d5c23000, 2093056, PROT_NONE) = 0
  1316. 23247 mmap(0x7f27d5e22000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x12000) = 0x7f27d5e22000
  1317. 23247 mmap(0x7f27d5e24000, 6792, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f27d5e24000
  1318. 23247 close(0) = 0
  1319. 23247 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1320. 23247 open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY) = 0
  1321. 23247 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0@\0\0\0\0\0\0\0\2601\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0 \0\37\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1322. 23247 fstat(0, {st_mode=S_IFREG|0644, st_size=14768, ...}) = 0
  1323. 23247 mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f27d5a0c000
  1324. 23247 mprotect(0x7f27d5a0e000, 2097152, PROT_NONE) = 0
  1325. 23247 mmap(0x7f27d5c0e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x2000) = 0x7f27d5c0e000
  1326. 23247 close(0) = 0
  1327. 23247 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1328. 23247 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  1329. 23247 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1330. 23247 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  1331. 23247 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27d6039000
  1332. 23247 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f27d5681000
  1333. 23247 mprotect(0x7f27d5803000, 2093056, PROT_NONE) = 0
  1334. 23247 mmap(0x7f27d5a02000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7f27d5a02000
  1335. 23247 mmap(0x7f27d5a07000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f27d5a07000
  1336. 23247 close(0) = 0
  1337. 23247 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27d6038000
  1338. 23247 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27d6037000
  1339. 23247 arch_prctl(ARCH_SET_FS, 0x7f27d6038700) = 0
  1340. 23247 mprotect(0x7f27d5a02000, 16384, PROT_READ) = 0
  1341. 23247 mprotect(0x7f27d5c0e000, 4096, PROT_READ) = 0
  1342. 23247 mprotect(0x7f27d5e22000, 4096, PROT_READ) = 0
  1343. 23247 mprotect(0x7f27d6045000, 4096, PROT_READ) = 0
  1344. 23247 munmap(0x7f27d603a000, 35560) = 0
  1345. 23247 socket(PF_NETLINK, SOCK_RAW, 0) = 0
  1346. 23247 setsockopt(0, SOL_SOCKET, SO_SNDBUF, [32768], 4) = 0
  1347. 23247 setsockopt(0, SOL_SOCKET, SO_RCVBUF, [1048576], 4) = 0
  1348. 23247 bind(0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
  1349. 23247 getsockname(0, {sa_family=AF_NETLINK, pid=23247, groups=00000000}, [12]) = 0
  1350. 23247 time(NULL) = 1400247962
  1351. 23247 sendto(0, "\34\0\0\0\22\0\1\3\233\26vS\0\0\0\0\0\0\0\0\10\0\35\0\1\0\0\0", 28, 0, NULL, 0) = 28
  1352. 23247 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\344\3\0\0\20\0\2\0\233\26vS\317Z\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0\7\0\3\0lo\0\0\10\0\r\0\0\0\0\0\5\0\20\0\0\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0004@\0\0\10\0\33\0\0\0\0\0\f\0\6\0noqueue\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\0\0\0\0\0\0\0\0\n\0\2\0\0\0\0\0\0\0\0\0`\0\7\0\376D\373\1\376D\373\1\331\26'\222\331\26'\222\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 2988
  1353. 23247 brk(0) = 0x6b3000
  1354. 23247 brk(0x6d4000) = 0x6d4000
  1355. 23247 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\370\3\0\0\20\0\2\0\233\26vS\317Z\0\0\0\0\1\0\4\0\0\0\202\0\0\0\0\0\0\0\v\0\3\0dummy0\0\0\10\0\r\0\0\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0J\362\246U\267j\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3024
  1356. 23247 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\233\26vS\317Z\0\0\0\0\1\0.\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif26.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0006\n4\4\315x\30\4P\360\213\327\321\235\324!\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3012
  1357. 23247 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\233\26vS\317Z\0\0\0\0\1\0001\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif28.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\341\270F\2\255\377%\4\320\21\300\245\v\203\270R\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3096
  1358. 23247 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\320\3\0\0\20\0\2\0\233\26vS\317Z\0\0\0\0\0\2R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 976
  1359. 23247 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\233\26vS\317Z\0\0\0\0\0\0R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 20
  1360. 23247 sendmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"<\0\0\0\30\0\5\5\234\26vS\0\0\0\0\2 \0\0\376\3\0\1\0\0\0\0\10\0\1\0\324S\270\205\10\0\5\0X\276\26\1\10\0\7\0X\276\26q\10\0\4\0\2\0\0\0", 60}], msg_controllen=0, msg_flags=0}, 0) = 60
  1361. 23247 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"$\0\0\0\2\0\0\0\234\26vS\317Z\0\0\0\0\0\0<\0\0\0\30\0\5\5\234\26vS\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 36
  1362. 23247 exit_group(0) = ?
  1363. 23246 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23247
  1364. 23246 --- SIGCHLD (Child exited) @ 0 (0) ---
  1365. 23246 rt_sigreturn(0x11) = 23247
  1366. 23246 exit_group(0) = ?
  1367. 23243 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23246
  1368. 23243 --- SIGCHLD (Child exited) @ 0 (0) ---
  1369. 23243 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 0
  1370. 23243 connect(0, {sa_family=AF_INET, sin_port=htons(1723), sin_addr=inet_addr("212.83.184.133")}, 16) = 0
  1371. 23243 socket(PF_FILE, SOCK_STREAM, 0) = 1
  1372. 23243 stat("/var/run/pptp/255.255.255.255:212.83.184.133", 0x7fff49dc8fd0) = -1 ENOENT (No such file or directory)
  1373. 23243 stat("/var/run/pptp", {st_mode=S_IFDIR|0750, st_size=40, ...}) = 0
  1374. 23243 bind(1, {sa_family=AF_FILE, path="/var/run/pptp/255.255.255.255:212.83.184.133"}, 110) = 0
  1375. 23243 chmod("/var/run/pptp/255.255.255.255:212.83.184.133", 0777) = 0
  1376. 23243 listen(1, 127) = 0
  1377. 23243 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23248
  1378. 23243 close(3) = 0
  1379. 23243 exit_group(0) = ?
  1380. 23248 open("/dev/null", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 4
  1381. 23248 dup2(4, 2) = 2
  1382. 23234 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23243
  1383. 23234 --- SIGCHLD (Child exited) @ 0 (0) ---
  1384. 23248 close(4 <unfinished ...>
  1385. 23234 rt_sigprocmask(SIG_BLOCK, [CHLD], <unfinished ...>
  1386. 23248 <... close resumed> ) = 0
  1387. 23234 <... rt_sigprocmask resumed> [], 8) = 0
  1388. 23248 rt_sigprocmask(SIG_BLOCK, NULL, <unfinished ...>
  1389. 23234 rt_sigaction(SIGCHLD, NULL, <unfinished ...>
  1390. 23248 <... rt_sigprocmask resumed> [], 8) = 0
  1391. 23234 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
  1392. 23248 rt_sigaction(SIGINT, {0x40a4dc, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, <unfinished ...>
  1393. 23234 rt_sigprocmask(SIG_SETMASK, [], <unfinished ...>
  1394. 23248 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
  1395. 23234 <... rt_sigprocmask resumed> NULL, 8) = 0
  1396. 23248 rt_sigaction(SIGTERM, {0x40a4dc, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, <unfinished ...>
  1397. 23234 nanosleep({1, 0}, <unfinished ...>
  1398. 23248 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
  1399. 23248 rt_sigaction(SIGPIPE, {0x40a4f6, [PIPE], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {SIG_IGN, [], 0}, 8) = 0
  1400. 23248 rt_sigaction(SIGUSR1, {0x40a4f6, [USR1], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {SIG_DFL, [], 0}, 8) = 0
  1401. 23248 fcntl(0, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
  1402. 23248 write(0, "\0\234\0\1\32+<M\0\1\0\0\1\0\0\0\0\0\0\3\0\0\0\3\377\377\0\1local\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0cananian\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 156) = 156
  1403. 23248 time([1400247962]) = 1400247962
  1404. 23248 sendto(3, "<29>May 16 15:46:02 pptp[23248]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'\n", 135, MSG_NOSIGNAL, NULL, 0) = 135
  1405. 23248 pipe([4, 5]) = 0
  1406. 23248 fcntl(4, F_SETFD, FD_CLOEXEC) = 0
  1407. 23248 fcntl(5, F_SETFD, FD_CLOEXEC) = 0
  1408. 23248 fcntl(5, F_GETFL) = 0x1 (flags O_WRONLY)
  1409. 23248 fcntl(5, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
  1410. 23248 rt_sigaction(SIGALRM, {0x409239, [], SA_RESTORER, 0x7fbea86154f0}, NULL, 8) = 0
  1411. 23248 setitimer(ITIMER_REAL, {it_interval={0, 0}, it_value={60, 0}}, NULL) = 0
  1412. 23248 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  1413. 23248 select(5, [0 4], [], NULL, NULL) = 1 (in [0])
  1414. 23248 read(0, 0xc575a0, 512) = -1 ECONNRESET (Connection reset by peer)
  1415. 23248 time([1400247962]) = 1400247962
  1416. 23248 sendto(3, "<29>May 16 15:46:02 pptp[23248]: anon log[pptp_read_some:pptp_ctrl.c:551]: read error: Connection reset by peer", 111, MSG_NOSIGNAL, NULL, 0) = 111
  1417. 23248 rt_sigaction(SIGINT, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4dc, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1418. 23248 rt_sigaction(SIGTERM, {0x40a4f6, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4dc, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1419. 23248 select(5, [0 4], [], NULL, {0, 0}) = 1 (in [0], left {0, 0})
  1420. 23248 read(0, "", 512) = 0
  1421. 23248 time([1400247962]) = 1400247962
  1422. 23248 sendto(3, "<29>May 16 15:46:02 pptp[23248]: anon log[pptp_read_some:pptp_ctrl.c:544]: read returned zero, peer has closed", 110, MSG_NOSIGNAL, NULL, 0) = 110
  1423. 23248 close(4) = 0
  1424. 23248 close(5) = 0
  1425. 23248 close(0) = 0
  1426. 23248 rt_sigaction(SIGINT, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1427. 23248 rt_sigaction(SIGTERM, {0x40a4f6, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4f6, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1428. 23248 close(0) = -1 EBADF (Bad file descriptor)
  1429. 23248 close(1) = 0
  1430. 23248 unlink("/var/run/pptp/255.255.255.255:212.83.184.133") = 0
  1431. 23248 close(3) = 0
  1432. 23248 exit_group(0) = ?
  1433. 23234 <... nanosleep resumed> 0x7fff49dc94a0) = 0
  1434. 23234 connect(1, {sa_family=AF_FILE, path="/var/run/pptp/255.255.255.255:212.83.184.133"}, 110) = -1 ENOENT (No such file or directory)
  1435. 23234 unlink("/var/run/pptp/255.255.255.255:212.83.184.133") = -1 ENOENT (No such file or directory)
  1436. 23234 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23250
  1437. 23234 wait4(23250, <unfinished ...>
  1438. 23250 close(1) = 0
  1439. 23250 close(0) = 0
  1440. 23250 close(4) = 0
  1441. 23250 prctl(PR_SET_NAME, 0x40c5b0, 0, 0, 0) = 0
  1442. 23250 pipe2([0, 1], O_CLOEXEC) = 0
  1443. 23250 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23251
  1444. 23250 close(1 <unfinished ...>
  1445. 23251 close(0 <unfinished ...>
  1446. 23250 <... close resumed> ) = 0
  1447. 23251 <... close resumed> ) = 0
  1448. 23250 fcntl(0, F_SETFD, 0 <unfinished ...>
  1449. 23251 fcntl(1, F_SETFD, 0 <unfinished ...>
  1450. 23250 <... fcntl resumed> ) = 0
  1451. 23251 <... fcntl resumed> ) = 0
  1452. 23251 execve("/bin/sh", ["sh", "-c", "/bin/ip route get 212.83.184.133"], [/* 15 vars */] <unfinished ...>
  1453. 23250 fstat(0, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
  1454. 23250 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbea8d8d000
  1455. 23250 read(0, <unfinished ...>
  1456. 23251 <... execve resumed> ) = 0
  1457. 23251 brk(0) = 0xfb5000
  1458. 23251 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1459. 23251 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f38fccf9000
  1460. 23251 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  1461. 23251 open("/etc/ld.so.cache", O_RDONLY) = 0
  1462. 23251 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  1463. 23251 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7f38fccf0000
  1464. 23251 close(0) = 0
  1465. 23251 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1466. 23251 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  1467. 23251 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1468. 23251 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  1469. 23251 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f38fc751000
  1470. 23251 mprotect(0x7f38fc8d3000, 2093056, PROT_NONE) = 0
  1471. 23251 mmap(0x7f38fcad2000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7f38fcad2000
  1472. 23251 mmap(0x7f38fcad7000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f38fcad7000
  1473. 23251 close(0) = 0
  1474. 23251 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f38fccef000
  1475. 23251 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f38fccee000
  1476. 23251 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f38fcced000
  1477. 23251 arch_prctl(ARCH_SET_FS, 0x7f38fccee700) = 0
  1478. 23251 mprotect(0x7f38fcad2000, 16384, PROT_READ) = 0
  1479. 23251 mprotect(0x7f38fccfb000, 4096, PROT_READ) = 0
  1480. 23251 munmap(0x7f38fccf0000, 35560) = 0
  1481. 23251 getpid() = 23251
  1482. 23251 rt_sigaction(SIGCHLD, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f38fc7834f0}, NULL, 8) = 0
  1483. 23251 geteuid() = 0
  1484. 23251 brk(0) = 0xfb5000
  1485. 23251 brk(0xfd6000) = 0xfd6000
  1486. 23251 getppid() = 23250
  1487. 23251 stat("/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  1488. 23251 stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  1489. 23251 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
  1490. 23251 rt_sigaction(SIGINT, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7f38fc7834f0}, NULL, 8) = 0
  1491. 23251 rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
  1492. 23251 rt_sigaction(SIGQUIT, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f38fc7834f0}, NULL, 8) = 0
  1493. 23251 rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
  1494. 23251 rt_sigaction(SIGTERM, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7f38fc7834f0}, NULL, 8) = 0
  1495. 23251 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f38fccee9d0) = 23252
  1496. 23251 wait4(-1, <unfinished ...>
  1497. 23252 execve("/bin/ip", ["/bin/ip", "route", "get", "212.83.184.133"], [/* 15 vars */]) = 0
  1498. 23252 brk(0) = 0x253e000
  1499. 23252 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1500. 23252 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d497c000
  1501. 23252 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  1502. 23252 open("/etc/ld.so.cache", O_RDONLY) = 0
  1503. 23252 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  1504. 23252 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7f50d4973000
  1505. 23252 close(0) = 0
  1506. 23252 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1507. 23252 open("/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY) = 0
  1508. 23252 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3008\0\0\0\0\0\0@\0\0\0\0\0\0\0\2103\1\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\37\0\36\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1509. 23252 fstat(0, {st_mode=S_IFREG|0644, st_size=80712, ...}) = 0
  1510. 23252 mmap(NULL, 2185864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f50d4549000
  1511. 23252 mprotect(0x7f50d455c000, 2093056, PROT_NONE) = 0
  1512. 23252 mmap(0x7f50d475b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x12000) = 0x7f50d475b000
  1513. 23252 mmap(0x7f50d475d000, 6792, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f50d475d000
  1514. 23252 close(0) = 0
  1515. 23252 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1516. 23252 open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY) = 0
  1517. 23252 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0@\0\0\0\0\0\0\0\2601\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0 \0\37\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1518. 23252 fstat(0, {st_mode=S_IFREG|0644, st_size=14768, ...}) = 0
  1519. 23252 mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f50d4345000
  1520. 23252 mprotect(0x7f50d4347000, 2097152, PROT_NONE) = 0
  1521. 23252 mmap(0x7f50d4547000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x2000) = 0x7f50d4547000
  1522. 23252 close(0) = 0
  1523. 23252 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1524. 23252 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  1525. 23252 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1526. 23252 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  1527. 23252 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4972000
  1528. 23252 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f50d3fba000
  1529. 23252 mprotect(0x7f50d413c000, 2093056, PROT_NONE) = 0
  1530. 23252 mmap(0x7f50d433b000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7f50d433b000
  1531. 23252 mmap(0x7f50d4340000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f50d4340000
  1532. 23252 close(0) = 0
  1533. 23252 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4971000
  1534. 23252 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d4970000
  1535. 23252 arch_prctl(ARCH_SET_FS, 0x7f50d4971700) = 0
  1536. 23252 mprotect(0x7f50d433b000, 16384, PROT_READ) = 0
  1537. 23252 mprotect(0x7f50d4547000, 4096, PROT_READ) = 0
  1538. 23252 mprotect(0x7f50d475b000, 4096, PROT_READ) = 0
  1539. 23252 mprotect(0x7f50d497e000, 4096, PROT_READ) = 0
  1540. 23252 munmap(0x7f50d4973000, 35560) = 0
  1541. 23252 socket(PF_NETLINK, SOCK_RAW, 0) = 0
  1542. 23252 setsockopt(0, SOL_SOCKET, SO_SNDBUF, [32768], 4) = 0
  1543. 23252 setsockopt(0, SOL_SOCKET, SO_RCVBUF, [1048576], 4) = 0
  1544. 23252 bind(0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
  1545. 23252 getsockname(0, {sa_family=AF_NETLINK, pid=23252, groups=00000000}, [12]) = 0
  1546. 23252 time(NULL) = 1400247963
  1547. 23252 sendto(0, "\34\0\0\0\22\0\1\3\234\26vS\0\0\0\0\0\0\0\0\10\0\35\0\1\0\0\0", 28, 0, NULL, 0) = 28
  1548. 23252 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\344\3\0\0\20\0\2\0\234\26vS\324Z\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0\7\0\3\0lo\0\0\10\0\r\0\0\0\0\0\5\0\20\0\0\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0004@\0\0\10\0\33\0\0\0\0\0\f\0\6\0noqueue\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\0\0\0\0\0\0\0\0\n\0\2\0\0\0\0\0\0\0\0\0`\0\7\0\376D\373\1\376D\373\1\331\26'\222\331\26'\222\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 2988
  1549. 23252 brk(0) = 0x253e000
  1550. 23252 brk(0x255f000) = 0x255f000
  1551. 23252 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\370\3\0\0\20\0\2\0\234\26vS\324Z\0\0\0\0\1\0\4\0\0\0\202\0\0\0\0\0\0\0\v\0\3\0dummy0\0\0\10\0\r\0\0\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0J\362\246U\267j\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3024
  1552. 23252 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\234\26vS\324Z\0\0\0\0\1\0.\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif26.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0006\n4\4\315x\30\4P\360\213\327\321\235\324!\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3012
  1553. 23252 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\234\26vS\324Z\0\0\0\0\1\0001\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif28.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\341\270F\2\255\377%\4\320\21\300\245\v\203\270R\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3096
  1554. 23252 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\320\3\0\0\20\0\2\0\234\26vS\324Z\0\0\0\0\0\2R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 976
  1555. 23252 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\234\26vS\324Z\0\0\0\0\0\0R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 20
  1556. 23252 sendmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"$\0\0\0\32\0\1\0\235\26vS\0\0\0\0\2 \0\0\0\0\0\0\0\0\0\0\10\0\1\0\324S\270\205", 36}], msg_controllen=0, msg_flags=0}, 0) = 36
  1557. 23252 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"h\0\0\0\30\0\0\0\235\26vS\324Z\0\0\2 \0\0\376\0\0\1\0\2\0\0\10\0\17\0\376\0\0\0\10\0\1\0\324S\270\205\10\0\4\0\2\0\0\0\10\0\7\0X\276\26q\10\0\5\0X\276\26\1$\0\f\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 104
  1558. 23252 fstat(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0
  1559. 23252 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f50d497b000
  1560. 23252 write(1, "212.83.184.133 via 88.190.22.1 dev eth0 src 88.190.22.113 \n cache \n", 71) = 71
  1561. 23250 <... read resumed> "212.83.184.133 via 88.190.22.1 dev eth0 src 88.190.22.113 \n cache \n", 4096) = 71
  1562. 23252 exit_group(0) = ?
  1563. 23250 close(0) = 0
  1564. 23250 wait4(23251, <unfinished ...>
  1565. 23251 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23252
  1566. 23251 --- SIGCHLD (Child exited) @ 0 (0) ---
  1567. 23251 rt_sigreturn(0x11) = 23252
  1568. 23251 exit_group(0) = ?
  1569. 23250 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23251
  1570. 23250 --- SIGCHLD (Child exited) @ 0 (0) ---
  1571. 23250 munmap(0x7fbea8d8d000, 4096) = 0
  1572. 23250 pipe2([0, 1], O_CLOEXEC) = 0
  1573. 23250 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23254
  1574. 23250 close(1 <unfinished ...>
  1575. 23254 close(0 <unfinished ...>
  1576. 23250 <... close resumed> ) = 0
  1577. 23254 <... close resumed> ) = 0
  1578. 23250 fcntl(0, F_SETFD, 0 <unfinished ...>
  1579. 23254 fcntl(1, F_SETFD, 0 <unfinished ...>
  1580. 23250 <... fcntl resumed> ) = 0
  1581. 23254 <... fcntl resumed> ) = 0
  1582. 23250 close(0 <unfinished ...>
  1583. 23254 execve("/bin/sh", ["sh", "-c", "/bin/ip route replace 212.83.184.133 via 88.190.22.1 dev eth0 src 88.190.22.113 \n"], [/* 15 vars */] <unfinished ...>
  1584. 23250 <... close resumed> ) = 0
  1585. 23250 wait4(23254, <unfinished ...>
  1586. 23254 <... execve resumed> ) = 0
  1587. 23254 brk(0) = 0xb0e000
  1588. 23254 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1589. 23254 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff74ef22000
  1590. 23254 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  1591. 23254 open("/etc/ld.so.cache", O_RDONLY) = 0
  1592. 23254 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  1593. 23254 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7ff74ef19000
  1594. 23254 close(0) = 0
  1595. 23254 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1596. 23254 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  1597. 23254 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1598. 23254 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  1599. 23254 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7ff74e97a000
  1600. 23254 mprotect(0x7ff74eafc000, 2093056, PROT_NONE) = 0
  1601. 23254 mmap(0x7ff74ecfb000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7ff74ecfb000
  1602. 23254 mmap(0x7ff74ed00000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7ff74ed00000
  1603. 23254 close(0) = 0
  1604. 23254 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff74ef18000
  1605. 23254 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff74ef17000
  1606. 23254 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7ff74ef16000
  1607. 23254 arch_prctl(ARCH_SET_FS, 0x7ff74ef17700) = 0
  1608. 23254 mprotect(0x7ff74ecfb000, 16384, PROT_READ) = 0
  1609. 23254 mprotect(0x7ff74ef24000, 4096, PROT_READ) = 0
  1610. 23254 munmap(0x7ff74ef19000, 35560) = 0
  1611. 23254 getpid() = 23254
  1612. 23254 rt_sigaction(SIGCHLD, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7ff74e9ac4f0}, NULL, 8) = 0
  1613. 23254 geteuid() = 0
  1614. 23254 brk(0) = 0xb0e000
  1615. 23254 brk(0xb2f000) = 0xb2f000
  1616. 23254 getppid() = 23250
  1617. 23254 stat("/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  1618. 23254 stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
  1619. 23254 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
  1620. 23254 rt_sigaction(SIGINT, {0x40f270, ~[RTMIN RT_1], SA_RESTORER, 0x7ff74e9ac4f0}, NULL, 8) = 0
  1621. 23254 rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
  1622. 23254 rt_sigaction(SIGQUIT, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7ff74e9ac4f0}, NULL, 8) = 0
  1623. 23254 rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
  1624. 23254 rt_sigaction(SIGTERM, {SIG_DFL, ~[RTMIN RT_1], SA_RESTORER, 0x7ff74e9ac4f0}, NULL, 8) = 0
  1625. 23254 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7ff74ef179d0) = 23255
  1626. 23254 wait4(-1, <unfinished ...>
  1627. 23255 execve("/bin/ip", ["/bin/ip", "route", "replace", "212.83.184.133", "via", "88.190.22.1", "dev", "eth0", "src", "88.190.22.113"], [/* 15 vars */]) = 0
  1628. 23255 brk(0) = 0x2103000
  1629. 23255 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1630. 23255 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5d77b34000
  1631. 23255 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
  1632. 23255 open("/etc/ld.so.cache", O_RDONLY) = 0
  1633. 23255 fstat(0, {st_mode=S_IFREG|0644, st_size=35560, ...}) = 0
  1634. 23255 mmap(NULL, 35560, PROT_READ, MAP_PRIVATE, 0, 0) = 0x7f5d77b2b000
  1635. 23255 close(0) = 0
  1636. 23255 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1637. 23255 open("/lib/x86_64-linux-gnu/libresolv.so.2", O_RDONLY) = 0
  1638. 23255 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\3008\0\0\0\0\0\0@\0\0\0\0\0\0\0\2103\1\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0\37\0\36\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0P\t\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1639. 23255 fstat(0, {st_mode=S_IFREG|0644, st_size=80712, ...}) = 0
  1640. 23255 mmap(NULL, 2185864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f5d77701000
  1641. 23255 mprotect(0x7f5d77714000, 2093056, PROT_NONE) = 0
  1642. 23255 mmap(0x7f5d77913000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x12000) = 0x7f5d77913000
  1643. 23255 mmap(0x7f5d77915000, 6792, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f5d77915000
  1644. 23255 close(0) = 0
  1645. 23255 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1646. 23255 open("/lib/x86_64-linux-gnu/libdl.so.2", O_RDONLY) = 0
  1647. 23255 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\0\0\0\0\0\0@\0\0\0\0\0\0\0\2601\0\0\0\0\0\0\0\0\0\0@\0008\0\t\0@\0 \0\37\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0\370\1\0\0\0\0\0\0\370\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\260\31\0\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1648. 23255 fstat(0, {st_mode=S_IFREG|0644, st_size=14768, ...}) = 0
  1649. 23255 mmap(NULL, 2109696, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f5d774fd000
  1650. 23255 mprotect(0x7f5d774ff000, 2097152, PROT_NONE) = 0
  1651. 23255 mmap(0x7f5d776ff000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x2000) = 0x7f5d776ff000
  1652. 23255 close(0) = 0
  1653. 23255 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
  1654. 23255 open("/lib/x86_64-linux-gnu/libc.so.6", O_RDONLY) = 0
  1655. 23255 read(0, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\357\1\0\0\0\0\0@\0\0\0\0\0\0\0P_\30\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0#\0\"\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\220k\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 832) = 832
  1656. 23255 fstat(0, {st_mode=S_IFREG|0755, st_size=1599504, ...}) = 0
  1657. 23255 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5d77b2a000
  1658. 23255 mmap(NULL, 3713112, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 0, 0) = 0x7f5d77172000
  1659. 23255 mprotect(0x7f5d772f4000, 2093056, PROT_NONE) = 0
  1660. 23255 mmap(0x7f5d774f3000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 0, 0x181000) = 0x7f5d774f3000
  1661. 23255 mmap(0x7f5d774f8000, 18520, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f5d774f8000
  1662. 23255 close(0) = 0
  1663. 23255 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5d77b29000
  1664. 23255 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5d77b28000
  1665. 23255 arch_prctl(ARCH_SET_FS, 0x7f5d77b29700) = 0
  1666. 23255 mprotect(0x7f5d774f3000, 16384, PROT_READ) = 0
  1667. 23255 mprotect(0x7f5d776ff000, 4096, PROT_READ) = 0
  1668. 23255 mprotect(0x7f5d77913000, 4096, PROT_READ) = 0
  1669. 23255 mprotect(0x7f5d77b36000, 4096, PROT_READ) = 0
  1670. 23255 munmap(0x7f5d77b2b000, 35560) = 0
  1671. 23255 socket(PF_NETLINK, SOCK_RAW, 0) = 0
  1672. 23255 setsockopt(0, SOL_SOCKET, SO_SNDBUF, [32768], 4) = 0
  1673. 23255 setsockopt(0, SOL_SOCKET, SO_RCVBUF, [1048576], 4) = 0
  1674. 23255 bind(0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
  1675. 23255 getsockname(0, {sa_family=AF_NETLINK, pid=23255, groups=00000000}, [12]) = 0
  1676. 23255 time(NULL) = 1400247963
  1677. 23255 sendto(0, "\34\0\0\0\22\0\1\3\234\26vS\0\0\0\0\0\0\0\0\10\0\35\0\1\0\0\0", 28, 0, NULL, 0) = 28
  1678. 23255 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\344\3\0\0\20\0\2\0\234\26vS\327Z\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0\7\0\3\0lo\0\0\10\0\r\0\0\0\0\0\5\0\20\0\0\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0004@\0\0\10\0\33\0\0\0\0\0\f\0\6\0noqueue\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\n\0\1\0\0\0\0\0\0\0\0\0\n\0\2\0\0\0\0\0\0\0\0\0`\0\7\0\376D\373\1\376D\373\1\331\26'\222\331\26'\222\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 2988
  1679. 23255 brk(0) = 0x2103000
  1680. 23255 brk(0x2124000) = 0x2124000
  1681. 23255 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\370\3\0\0\20\0\2\0\234\26vS\327Z\0\0\0\0\1\0\4\0\0\0\202\0\0\0\0\0\0\0\v\0\3\0dummy0\0\0\10\0\r\0\0\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0J\362\246U\267j\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3024
  1682. 23255 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\234\26vS\327Z\0\0\0\0\1\0.\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif26.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0006\n4\4\315x\30\4P\360\213\327\321\235\324!\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3012
  1683. 23255 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\354\3\0\0\20\0\2\0\234\26vS\327Z\0\0\0\0\1\0001\0\0\0C\20\1\0\0\0\0\0\f\0\3\0vif28.0\0\10\0\r\0 \0\0\0\5\0\20\0\6\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\17\0\6\0pfifo_fast\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377\n\0\1\0\376\377\377\377\377\377\0\0\n\0\2\0\377\377\377\377\377\377\0\0`\0\7\0\341\270F\2\255\377%\4\320\21\300\245\v\203\270R\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 3096
  1684. 23255 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\320\3\0\0\20\0\2\0\234\26vS\327Z\0\0\0\0\0\2R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 976
  1685. 23255 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\234\26vS\327Z\0\0\0\0\0\0R\0\0\0\220\20\0\0\0\0\0\0\t\0\3\0ppp0\0\0\0\0\10\0\r\0\3\0\0\0\5\0\20\0\2\0\0\0\5\0\21\0\0\0\0\0\10\0\4\0\334\5\0\0\10\0\33\0\0\0\0\0\t\0\6\0noop\0\0\0\0$\0\16\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\210\377\377`\0\7\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 20
  1686. 23255 sendmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"<\0\0\0\30\0\5\5\235\26vS\0\0\0\0\2 \0\0\376\3\0\1\0\0\0\0\10\0\1\0\324S\270\205\10\0\5\0X\276\26\1\10\0\7\0X\276\26q\10\0\4\0\2\0\0\0", 60}], msg_controllen=0, msg_flags=0}, 0) = 60
  1687. 23255 recvmsg(0, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"$\0\0\0\2\0\0\0\235\26vS\327Z\0\0\0\0\0\0<\0\0\0\30\0\5\5\235\26vS\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 16384}], msg_controllen=0, msg_flags=0}, 0) = 36
  1688. 23255 exit_group(0) = ?
  1689. 23254 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23255
  1690. 23254 --- SIGCHLD (Child exited) @ 0 (0) ---
  1691. 23254 rt_sigreturn(0x11) = 23255
  1692. 23254 exit_group(0) = ?
  1693. 23250 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23254
  1694. 23250 --- SIGCHLD (Child exited) @ 0 (0) ---
  1695. 23250 socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 0
  1696. 23250 connect(0, {sa_family=AF_INET, sin_port=htons(1723), sin_addr=inet_addr("212.83.184.133")}, 16) = 0
  1697. 23250 socket(PF_FILE, SOCK_STREAM, 0) = 1
  1698. 23250 stat("/var/run/pptp/255.255.255.255:212.83.184.133", 0x7fff49dc8fd0) = -1 ENOENT (No such file or directory)
  1699. 23250 stat("/var/run/pptp", {st_mode=S_IFDIR|0750, st_size=40, ...}) = 0
  1700. 23250 bind(1, {sa_family=AF_FILE, path="/var/run/pptp/255.255.255.255:212.83.184.133"}, 110) = 0
  1701. 23250 chmod("/var/run/pptp/255.255.255.255:212.83.184.133", 0777) = 0
  1702. 23250 listen(1, 127) = 0
  1703. 23250 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7fbea8d839d0) = 23256
  1704. 23250 close(3) = 0
  1705. 23256 open("/dev/null", O_WRONLY|O_CREAT|O_TRUNC, 0666 <unfinished ...>
  1706. 23250 exit_group(0) = ?
  1707. 23256 <... open resumed> ) = 4
  1708. 23256 dup2(4, 2) = 2
  1709. 23256 close(4) = 0
  1710. 23234 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 23250
  1711. 23256 rt_sigprocmask(SIG_BLOCK, NULL, <unfinished ...>
  1712. 23234 --- SIGCHLD (Child exited) @ 0 (0) ---
  1713. 23256 <... rt_sigprocmask resumed> [], 8) = 0
  1714. 23234 rt_sigprocmask(SIG_BLOCK, [CHLD], <unfinished ...>
  1715. 23256 rt_sigaction(SIGINT, {0x40a4dc, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, <unfinished ...>
  1716. 23234 <... rt_sigprocmask resumed> [], 8) = 0
  1717. 23256 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
  1718. 23234 rt_sigaction(SIGCHLD, NULL, <unfinished ...>
  1719. 23256 rt_sigaction(SIGTERM, {0x40a4dc, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, <unfinished ...>
  1720. 23234 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
  1721. 23256 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
  1722. 23234 rt_sigprocmask(SIG_SETMASK, [], <unfinished ...>
  1723. 23256 rt_sigaction(SIGPIPE, {0x40a4f6, [PIPE], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, <unfinished ...>
  1724. 23234 <... rt_sigprocmask resumed> NULL, 8) = 0
  1725. 23256 <... rt_sigaction resumed> {SIG_IGN, [], 0}, 8) = 0
  1726. 23234 nanosleep({1, 0}, <unfinished ...>
  1727. 23256 rt_sigaction(SIGUSR1, {0x40a4f6, [USR1], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {SIG_DFL, [], 0}, 8) = 0
  1728. 23256 fcntl(0, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
  1729. 23256 write(0, "\0\234\0\1\32+<M\0\1\0\0\1\0\0\0\0\0\0\3\0\0\0\3\377\377\0\1local\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0cananian\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 156) = 156
  1730. 23256 time([1400247963]) = 1400247963
  1731. 23256 sendto(3, "<29>May 16 15:46:03 pptp[23256]: anon log[ctrlp_rep:pptp_ctrl.c:251]: Sent control packet type is 1 'Start-Control-Connection-Request'\n", 135, MSG_NOSIGNAL, NULL, 0) = 135
  1732. 23256 pipe([4, 5]) = 0
  1733. 23256 fcntl(4, F_SETFD, FD_CLOEXEC) = 0
  1734. 23256 fcntl(5, F_SETFD, FD_CLOEXEC) = 0
  1735. 23256 fcntl(5, F_GETFL) = 0x1 (flags O_WRONLY)
  1736. 23256 fcntl(5, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
  1737. 23256 rt_sigaction(SIGALRM, {0x409239, [], SA_RESTORER, 0x7fbea86154f0}, NULL, 8) = 0
  1738. 23256 setitimer(ITIMER_REAL, {it_interval={0, 0}, it_value={60, 0}}, NULL) = 0
  1739. 23256 rt_sigprocmask(SIG_BLOCK, NULL, [], 8) = 0
  1740. 23256 select(5, [0 4], [], NULL, NULL) = 1 (in [0])
  1741. 23256 read(0, 0xc575a0, 512) = -1 ECONNRESET (Connection reset by peer)
  1742. 23256 time([1400247963]) = 1400247963
  1743. 23256 sendto(3, "<29>May 16 15:46:03 pptp[23256]: anon log[pptp_read_some:pptp_ctrl.c:551]: read error: Connection reset by peer", 111, MSG_NOSIGNAL, NULL, 0) = 111
  1744. 23256 rt_sigaction(SIGINT, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4dc, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1745. 23256 rt_sigaction(SIGTERM, {0x40a4f6, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4dc, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1746. 23256 select(5, [0 4], [], NULL, {0, 0}) = 1 (in [0], left {0, 0})
  1747. 23256 read(0, "", 512) = 0
  1748. 23256 time([1400247963]) = 1400247963
  1749. 23256 sendto(3, "<29>May 16 15:46:03 pptp[23256]: anon log[pptp_read_some:pptp_ctrl.c:544]: read returned zero, peer has closed", 110, MSG_NOSIGNAL, NULL, 0) = 110
  1750. 23256 close(4) = 0
  1751. 23256 close(5) = 0
  1752. 23256 close(0) = 0
  1753. 23256 rt_sigaction(SIGINT, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4f6, [INT], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1754. 23256 rt_sigaction(SIGTERM, {0x40a4f6, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, {0x40a4f6, [TERM], SA_RESTORER|SA_RESTART, 0x7fbea86154f0}, 8) = 0
  1755. 23256 close(0) = -1 EBADF (Bad file descriptor)
  1756. 23256 close(1) = 0
  1757. 23256 unlink("/var/run/pptp/255.255.255.255:212.83.184.133") = 0
  1758. 23256 close(3) = 0
  1759. 23256 exit_group(0) = ?
  1760. 23234 <... nanosleep resumed> 0x7fff49dc94a0) = 0
  1761. 23234 close(1) = 0
  1762. 23234 write(2, "anon fatal[open_callmgr:pptp.c:495]: Could not launch call manager after 3 tries.\n", 82) = 82
  1763. 23234 time([1400247964]) = 1400247964
  1764. 23234 sendto(3, "<26>May 16 15:46:04 pptp[23234]: anon fatal[open_callmgr:pptp.c:495]: Could not launch call manager after 3 tries.", 114, MSG_NOSIGNAL, NULL, 0) = 114
  1765. 23234 close(3) = 0
  1766. 23234 exit_group(1) = ?
  1767. 23232 <... wait4 resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 1}], 0, NULL) = 23234
  1768. 23232 --- SIGCHLD (Child exited) @ 0 (0) ---
  1769. 23232 rt_sigreturn(0x11) = 23234
  1770. 23232 exit_group(1) = ?
  1771. 23231 <... select resumed> ) = 2 (in [8 10], left {0, 930321})
  1772. 23231 --- SIGCHLD (Child exited) @ 0 (0) ---
  1773. 23231 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
  1774. 23231 gettimeofday({1400247964, 627270}, NULL) = 0
  1775. 23231 wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 1}], WNOHANG, NULL) = 23232
  1776. 23231 time([1400247964]) = 1400247964
  1777. 23231 sendto(3, "<151>May 16 15:46:04 pppd[23231]: Script pptp 212.83.184.133 --nolaunchpppd finished (pid 23232), status = 0x1", 110, MSG_NOSIGNAL, NULL, 0) = 110
  1778. 23231 write(2, "Script pptp 212.83.184.133 --nolaunchpppd finished (pid 23232), status = 0x1", 76) = 76
  1779. 23231 write(2, "\n", 1) = 1
  1780. 23231 wait4(-1, 0x7fffea07b3ec, WNOHANG, NULL) = -1 ECHILD (No child processes)
  1781. 23231 read(8, "", 1502) = 0
  1782. 23231 time([1400247964]) = 1400247964
  1783. 23231 sendto(3, "<149>May 16 15:46:04 pppd[23231]: Modem hangup", 46, MSG_NOSIGNAL, NULL, 0) = 46
  1784. 23231 write(2, "Modem hangup", 12) = 12
  1785. 23231 write(2, "\n", 1) = 1
  1786. 23231 time([1400247964]) = 1400247964
  1787. 23231 sendto(3, "<149>May 16 15:46:04 pppd[23231]: Connection terminated.", 56, MSG_NOSIGNAL, NULL, 0) = 56
  1788. 23231 write(2, "Connection terminated.", 22) = 22
  1789. 23231 write(2, "\n", 1) = 1
  1790. 23231 unlink("/var/run/ppp0.pid") = 0
  1791. 23231 close(8) = 0
  1792. 23231 close(10) = 0
  1793. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=356, len=1}) = 0
  1794. 23231 fcntl(7, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=952, len=1}) = 0
  1795. 23231 fcntl(7, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=952, len=1}) = 0
  1796. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  1797. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  1798. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=356, len=1}) = 0
  1799. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1}) = 0
  1800. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1}) = 0
  1801. 23231 close(9) = 0
  1802. 23231 close(9) = -1 EBADF (Bad file descriptor)
  1803. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=504, len=1}) = 0
  1804. 23231 fcntl(7, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=1000, len=1}) = 0
  1805. 23231 fcntl(7, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=1000, len=1}) = 0
  1806. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  1807. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  1808. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=504, len=1}) = 0
  1809. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=424, len=1}) = 0
  1810. 23231 fcntl(7, F_SETLK, {type=F_WRLCK, whence=SEEK_SET, start=784, len=1}) = 0
  1811. 23231 fcntl(7, F_SETLK, {type=F_UNLCK, whence=SEEK_SET, start=784, len=1}) = 0
  1812. 23231 fcntl(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=164, len=1}) = 0
  1813. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=164, len=1}) = 0
  1814. 23231 fcntl(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=424, len=1}) = 0
  1815. 23231 time([1400247964]) = 1400247964
  1816. 23231 sendto(3, "<150>May 16 15:46:04 pppd[23231]: Exit.", 39, MSG_NOSIGNAL, NULL, 0) = 39
  1817. 23231 exit_group(16) = ?
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!