Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- rt_sigprocmask(SIG_BLOCK, [CHLD], NULL, 8) = 0
- read(0, "\0\000321/402721482\0root@mail.networksolutionsemail.com\0winn-test.com-user1@winn-test.com\0", 1024) = 86
- open("321/402721482", O_RDONLY|O_NONBLOCK) = 2
- fstat(2, {st_mode=S_IFREG|0644, st_size=277, ...}) = 0
- pipe([3, 4]) = 0
- fcntl(3, F_SETFD, FD_CLOEXEC) = 0
- clone(Process 10734 attached
- <unfinished ...>
- [pid 10734] chdir("/var/qmail" <unfinished ...>
- [pid 10658] <... clone resumed> child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f621732d9d0) = 10734
- [pid 10734] <... chdir resumed> ) = 0
- [pid 10658] close(2 <unfinished ...>
- [pid 10734] open("users/cdb", O_RDONLY|O_NONBLOCK <unfinished ...>
- [pid 10658] <... close resumed> ) = 0
- [pid 10658] fcntl(4, F_SETFD, FD_CLOEXEC) = 0
- [pid 10658] rt_sigprocmask(SIG_UNBLOCK, [CHLD], <unfinished ...>
- [pid 10734] <... open resumed> ) = 5
- [pid 10658] <... rt_sigprocmask resumed> NULL, 8) = 0
- [pid 10734] lseek(5, 40, SEEK_SET <unfinished ...>
- [pid 10658] select(4, [0 3], NULL, NULL, NULL <unfinished ...>
- [pid 10734] <... lseek resumed> ) = 40
- [pid 10734] read(5, "\321_\3\0\34\0\0\0", 8) = 8
- [pid 10734] lseek(5, 221305, SEEK_SET) = 221305
- [pid 10734] read(5, "\5\364\22o\247\375\0\0", 8) = 8
- [pid 10734] lseek(5, 221313, SEEK_SET) = 221313
- [pid 10734] read(5, "\5\31Ct\356\261\1\0", 8) = 8
- [pid 10734] lseek(5, 221321, SEEK_SET) = 221321
- [pid 10734] read(5, "\5\25\0\0\210[\3\0", 8) = 8
- [pid 10734] lseek(5, 220040, SEEK_SET) = 220040
- [pid 10734] read(5, "\0\0\0\0\1\0\0\0", 8) = 8
- [pid 10734] read(5, "-", 1) = 1
- [pid 10734] lseek(5, 1816, SEEK_SET) = 1816
- [pid 10734] read(5, "A\331\3\0\32\0\0\0", 8) = 8
- [pid 10734] lseek(5, 252249, SEEK_SET) = 252249
- [pid 10734] read(5, "\0\0\0\0\0\0\0\0", 8) = 8
- [pid 10734] lseek(5, 280, SEEK_SET) = 280
- [pid 10734] read(5, "\341p\3\0\26\0\0\0", 8) = 8
- [pid 10734] lseek(5, 225561, SEEK_SET) = 225561
- [pid 10734] read(5, "\0\0\0\0\0\0\0\0", 8) = 8
- [pid 10734] lseek(5, 1208, SEEK_SET) = 1208
- [pid 10734] read(5, "\21\262\3\0\4\0\0\0", 8) = 8
- [pid 10734] lseek(5, 242201, SEEK_SET) = 242201
- [pid 10734] read(5, "\0\0\0\0\0\0\0\0", 8) = 8
- [pid 10734] lseek(5, 1056, SEEK_SET) = 1056
- [pid 10734] read(5, "\261\245\3\0\32\0\0\0", 8) = 8
- [pid 10734] lseek(5, 239161, SEEK_SET) = 239161
- [pid 10734] read(5, "\204~\300\221\205\254\1\0", 8) = 8
- [pid 10734] lseek(5, 239169, SEEK_SET) = 239169
- [pid 10734] read(5, "\0\0\0\0\0\0\0\0", 8) = 8
- [pid 10734] close(5) = 0
- [pid 10734] pipe([5, 6]) = 0
- [pid 10734] vfork(Process 10735 attached
- <unfinished ...>
- [pid 10735] setgroups(1, [70]) = 0
- [pid 10735] setgid(70) = 0
- [pid 10735] setuid(74) = 0
- [pid 10735] close(5) = 0
- [pid 10735] fcntl(6, F_GETFL) = 0x1 (flags O_WRONLY)
- [pid 10735] close(1) = 0
- [pid 10735] fcntl(6, F_DUPFD, 1) = 1
- [pid 10735] close(6) = 0
- [pid 10735] execve("bin/qmail-getpw", ["bin/qmail-getpw", "winn-test.com-user1"], [/* 1 var */] <unfinished ...>
- [pid 10734] <... vfork resumed> ) = 10735
- [pid 10734] close(6) = 0
- [pid 10735] <... execve resumed> ) = 0
- [pid 10734] read(5, <unfinished ...>
- [pid 10735] brk(0) = 0x605000
- [pid 10735] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f361cf6e000
- [pid 10735] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
- [pid 10735] open("/etc/ld.so.cache", O_RDONLY) = 3
- [pid 10735] fstat(3, {st_mode=S_IFREG|0644, st_size=56004, ...}) = 0
- [pid 10735] mmap(NULL, 56004, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f361cf60000
- [pid 10735] close(3) = 0
- [pid 10735] open("/lib64/libc.so.6", O_RDONLY) = 3
- [pid 10735] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260!\2\0\0\0\0\0@\0\0\0\0\0\0\0\220k\30\0\0\0\0\0\0\0\0\0@\0008\0\v\0@\0E\0D\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0h\2\0\0\0\0\0\0h\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0008\17\30\0\0\0\0\0008\17\30\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\240F\0\0\0\0\0\0\360\224\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0@K\30\0\0\0\0\0@K8\0\0\0\0\0@K8\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\4\0\0\0\0\0\0\0\7\0\0\0\4\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\20\0\0\0\0\0\0\0h\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\214h\0\0\0\0\0\0\214h\0\0\0\0\0\0\4\0\0\0\0\0\0\0"..., 832) = 832
- [pid 10735] fstat(3, {st_mode=S_IFREG|0755, st_size=1604816, ...}) = 0
- [pid 10735] mmap(NULL, 3714056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f361c9c5000
- [pid 10735] mprotect(0x7f361cb46000, 2097152, PROT_NONE) = 0
- [pid 10735] mmap(0x7f361cd46000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x181000) = 0x7f361cd46000
- [pid 10735] mmap(0x7f361cd4b000, 19464, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f361cd4b000
- [pid 10735] close(3) = 0
- [pid 10735] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f361cf5f000
- [pid 10735] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f361cf5e000
- [pid 10735] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f361cf5d000
- [pid 10735] arch_prctl(ARCH_SET_FS, 0x7f361cf5e700) = 0
- [pid 10735] mprotect(0x7f361cd46000, 16384, PROT_READ) = 0
- [pid 10735] mprotect(0x602000, 4096, PROT_READ) = 0
- [pid 10735] mprotect(0x7f361cf6f000, 4096, PROT_READ) = 0
- [pid 10735] munmap(0x7f361cf60000, 56004) = 0
- [pid 10735] brk(0) = 0x605000
- [pid 10735] brk(0x626000) = 0x626000
- [pid 10735] socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- [pid 10735] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0
- [pid 10735] sendto(3, "\2\0\0\0\v\0\0\0\7\0\0\0passwd\0", 19, MSG_NOSIGNAL, NULL, 0) = 19
- [pid 10735] poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}])
- [pid 10735] recvmsg(3, {msg_name(0)=NULL, msg_iov(2)=[{"\0\0\0\0\0\0\0", 7}, {"\207\360\226|\0\0\0\0", 8}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 0
- [pid 10735] close(3) = 0
- [pid 10735] socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- [pid 10735] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0
- [pid 10735] sendto(3, "\2\0\0\0\0\0\0\0\24\0\0\0winn-test.com-user1\0", 32, MSG_NOSIGNAL, NULL, 0) = 32
- [pid 10735] poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}])
- [pid 10735] read(3, "\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36) = 36
- [pid 10735] close(3) = 0
- [pid 10735] socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- [pid 10735] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0
- [pid 10735] sendto(3, "\2\0\0\0\0\0\0\0\16\0\0\0winn-test.com\0", 26, MSG_NOSIGNAL, NULL, 0) = 26
- [pid 10735] poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}])
- [pid 10735] read(3, "\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36) = 36
- [pid 10735] close(3) = 0
- [pid 10735] socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- [pid 10735] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0
- [pid 10735] sendto(3, "\2\0\0\0\0\0\0\0\5\0\0\0winn\0", 17, MSG_NOSIGNAL, NULL, 0) = 17
- [pid 10735] poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}])
- [pid 10735] read(3, "\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 36) = 36
- [pid 10735] close(3) = 0
- [pid 10735] socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- [pid 10735] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0
- [pid 10735] sendto(3, "\2\0\0\0\0\0\0\0\6\0\0\0alias\0", 18, MSG_NOSIGNAL, NULL, 0) = 18
- [pid 10735] poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}])
- [pid 10735] read(3, "\2\0\0\0\1\0\0\0\6\0\0\0\2\0\0\0G\0\0\0F\0\0\0\n\0\0\0\37\0\0\0\22\0\0\0", 36) = 36
- [pid 10735] read(3, "alias\0x\0base-user\0/usr/services/mail/qmail/alias\0/usr/sbin/nologin\0", 67) = 67
- [pid 10735] close(3) = 0
- [pid 10735] write(1, "alias\00071\00070\0/usr/services/mail/qmail/alias\0-\0winn-test.com-user1\0", 65) = 65
- [pid 10735] exit_group(0) = ?
- Process 10735 detached
- [pid 10734] <... read resumed> "alias\00071\00070\0/usr/services/mail/qmail/alias\0-\0winn-test.com-user1\0", 128) = 65
- [pid 10734] read(5, "", 128) = 0
- [pid 10734] close(5) = 0
- [pid 10734] wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 10735
- [pid 10734] fcntl(2, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
- [pid 10734] close(0) = 0
- [pid 10734] fcntl(2, F_DUPFD, 0) = 0
- [pid 10734] close(2) = 0
- [pid 10734] fcntl(4, F_GETFL) = 0x1 (flags O_WRONLY)
- [pid 10734] close(1) = 0
- [pid 10734] fcntl(4, F_DUPFD, 1) = 1
- [pid 10734] close(4) = 0
- [pid 10734] fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY)
- [pid 10734] close(2) = -1 EBADF (Bad file descriptor)
- [pid 10734] fcntl(1, F_DUPFD, 2) = 2
- [pid 10734] setgroups(1, [70]) = 0
- [pid 10734] setgid(70) = 0
- [pid 10734] setuid(71) = 0
- [pid 10734] getuid() = 71
- [pid 10734] execve("bin/qmail-local", ["bin/qmail-local", "--", "alias", "/usr/services/mail/qmail/alias", "winn-test.com-user1", "-", "winn-test.com-user1", "winn-test.com", "root@mail.networksolutionsemail.com", "./Mailbox"], [/* 1 var */]) = 0
- [pid 10734] brk(0) = 0x612000
- [pid 10734] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8791915000
- [pid 10734] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
- [pid 10734] open("/etc/ld.so.cache", O_RDONLY) = 3
- [pid 10734] fstat(3, {st_mode=S_IFREG|0644, st_size=56004, ...}) = 0
- [pid 10734] mmap(NULL, 56004, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f8791907000
- [pid 10734] close(3) = 0
- [pid 10734] open("/usr/lib64/libmailindex.so", O_RDONLY) = 3
- [pid 10734] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p#\0\0\0\0\0\0@\0\0\0\0\0\0\0\30\303\0\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\31\0\30\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0<\265\0\0\0\0\0\0<\265\0\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\320\275\0\0\0\0\0\0\320\275 \0\0\0\0\0\320\275 \0\0\0\0\0\210\4\0\0\0\0\0\0\320\24\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\370\275\0\0\0\0\0\0\370\275 \0\0\0\0\0\370\275 \0\0\0\0\0\240\1\0\0\0\0\0\0\240\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\24\251\0\0\0\0\0\0\24\251\0\0\0\0\0\0\24\251\0\0\0\0\0\0D\2\0\0\0\0\0\0D\2\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0R\345td\4\0\0\0\320\275\0\0\0\0\0\0\320\275 \0\0\0\0\0\320\275 \0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\1\0\0\0\0\0\0\0\200\25\4e\0(\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0a\0\0\0o\0\0\0\0\0\0\0[\0\0\0W\0\0\0\17\0\0\0O\0\0\0\0\0\0\0\0\0\0\0S\0\0\0\0\0\0\0\0\0\0\0d\0\0\0c\0\0\0"..., 832) = 832
- [pid 10734] fstat(3, {st_mode=S_IFREG|0755, st_size=51544, ...}) = 0
- [pid 10734] mmap(NULL, 2151072, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f87914e9000
- [pid 10734] mprotect(0x7f87914f5000, 2093056, PROT_NONE) = 0
- [pid 10734] mmap(0x7f87916f4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f87916f4000
- [pid 10734] mmap(0x7f87916f6000, 672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f87916f6000
- [pid 10734] close(3) = 0
- [pid 10734] open("/lib64/libc.so.6", O_RDONLY) = 3
- [pid 10734] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260!\2\0\0\0\0\0@\0\0\0\0\0\0\0\220k\30\0\0\0\0\0\0\0\0\0@\0008\0\v\0@\0E\0D\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0h\2\0\0\0\0\0\0h\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0008\17\30\0\0\0\0\0008\17\30\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\240F\0\0\0\0\0\0\360\224\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0@K\30\0\0\0\0\0@K8\0\0\0\0\0@K8\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\4\0\0\0\0\0\0\0\7\0\0\0\4\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\20\0\0\0\0\0\0\0h\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\214h\0\0\0\0\0\0\214h\0\0\0\0\0\0\4\0\0\0\0\0\0\0"..., 832) = 832
- [pid 10734] fstat(3, {st_mode=S_IFREG|0755, st_size=1604816, ...}) = 0
- [pid 10734] mmap(NULL, 3714056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f879115e000
- [pid 10734] mprotect(0x7f87912df000, 2097152, PROT_NONE) = 0
- [pid 10734] mmap(0x7f87914df000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x181000) = 0x7f87914df000
- [pid 10734] mmap(0x7f87914e4000, 19464, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f87914e4000
- [pid 10734] close(3) = 0
- [pid 10734] open("/usr/lib64/libdb-4.4.so", O_RDONLY) = 3
- [pid 10734] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360G\2\0\0\0\0\0@\0\0\0\0\0\0\0h4\30\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\32\0\31\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\337\27\0\0\0\0\0\f\337\27\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\10\357\27\0\0\0\0\0\10\3577\0\0\0\0\0\10\3577\0\0\0\0\0\224D\0\0\0\0\0\0pH\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0h\377\27\0\0\0\0\0h\3777\0\0\0\0\0h\3777\0\0\0\0\0\260\1\0\0\0\0\0\0\260\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\f\247\26\0\0\0\0\0\f\247\26\0\0\0\0\0\f\247\26\0\0\0\0\0\f;\0\0\0\0\0\0\f;\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0R\345td\4\0\0\0\10\357\27\0\0\0\0\0\10\3577\0\0\0\0\0\10\3577\0\0\0\0\0\370 \0\0\0\0\0\0\370 \0\0\0\0\0\0\1\0\0\0\0\0\0\0\200\25\4e\0(\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0\361\3\0\0\26\6\0\0O\3\0\0\221\5\0\0\30\4\0\0\24\6\0\0J\5\0\0j\2\0\0\325\1\0\0c\0\0\0(\4\0\0\264\2\0\0\235\5\0\0\0\0\0\0"..., 832) = 832
- [pid 10734] fstat(3, {st_mode=S_IFREG|0755, st_size=1587944, ...}) = 0
- [pid 10734] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8791906000
- [pid 10734] mmap(NULL, 3684216, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8790dda000
- [pid 10734] mprotect(0x7f8790f58000, 2097152, PROT_NONE) = 0
- [pid 10734] mmap(0x7f8791158000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17e000) = 0x7f8791158000
- [pid 10734] close(3) = 0
- [pid 10734] open("/lib64/libpthread.so.0", O_RDONLY) = 3
- [pid 10734] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340k\0\0\0\0\0\0@\0\0\0\0\0\0\0\320\204\1\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0$\0!\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0`,\1\0\0\0\0\0`,\1\0\0\0\0\0`,\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\354p\1\0\0\0\0\0\354p\1\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\250{\1\0\0\0\0\0\250{!\0\0\0\0\0\250{!\0\0\0\0\0\310\6\0\0\0\0\0\0\370G\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\210}\1\0\0\0\0\0\210}!\0\0\0\0\0\210}!\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0p\2\0\0\0\0\0\0p\2\0\0\0\0\0\0p\2\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0|,\1\0\0\0\0\0|,\1\0\0\0\0\0|,\1\0\0\0\0\0D\n\0\0\0\0\0\0D\n\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0"..., 832) = 832
- [pid 10734] fstat(3, {st_mode=S_IFREG|0755, st_size=135557, ...}) = 0
- [pid 10734] mmap(NULL, 2212768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f8790bbd000
- [pid 10734] mprotect(0x7f8790bd5000, 2093056, PROT_NONE) = 0
- [pid 10734] mmap(0x7f8790dd4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7f8790dd4000
- [pid 10734] mmap(0x7f8790dd6000, 13216, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f8790dd6000
- [pid 10734] close(3) = 0
- [pid 10734] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8791905000
- [pid 10734] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8791904000
- [pid 10734] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f8791903000
- [pid 10734] arch_prctl(ARCH_SET_FS, 0x7f8791904700) = 0
- [pid 10734] mprotect(0x7f8790dd4000, 4096, PROT_READ) = 0
- [pid 10734] mprotect(0x7f8791158000, 12288, PROT_READ) = 0
- [pid 10734] mprotect(0x7f87914df000, 16384, PROT_READ) = 0
- [pid 10734] mprotect(0x7f87916f4000, 4096, PROT_READ) = 0
- [pid 10734] mprotect(0x60d000, 4096, PROT_READ) = 0
- [pid 10734] mprotect(0x7f8791916000, 4096, PROT_READ) = 0
- [pid 10734] munmap(0x7f8791907000, 56004) = 0
- [pid 10734] set_tid_address(0x7f87919049d0) = 10734
- [pid 10734] set_robust_list(0x7f87919049e0, 0x18) = 0
- [pid 10734] futex(0x7fff55aa6f6c, FUTEX_WAKE_PRIVATE, 1) = 0
- [pid 10734] futex(0x7fff55aa6f6c, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 1, NULL, 7f8791904700) = -1 EAGAIN (Resource temporarily unavailable)
- [pid 10734] rt_sigaction(SIGRTMIN, {0x7f8790bc3660, [], SA_RESTORER|SA_SIGINFO, 0x7f8790bcd2e0}, NULL, 8) = 0
- [pid 10734] rt_sigaction(SIGRT_1, {0x7f8790bc36f0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7f8790bcd2e0}, NULL, 8) = 0
- [pid 10734] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
- [pid 10734] getrlimit(RLIMIT_STACK, {rlim_cur=500000000, rlim_max=RLIM_INFINITY}) = 0
- [pid 10734] umask(077) = 077
- [pid 10734] rt_sigaction(SIGPIPE, {SIG_IGN, [], SA_RESTORER, 0x7f8791193ad0}, NULL, 8) = 0
- [pid 10734] chdir("/usr/services/mail/qmail/alias") = 0
- [pid 10734] stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
- [pid 10734] lseek(0, 0, SEEK_SET) = 0
- [pid 10734] read(0, "Received: (qmail 10733 invoked by uid 0); 17 Jan 2012 21:13:47 -0000\nDate: 17 Jan 2012 21:13:33 -0000\nMessage-ID: <20120117211333.10732.qmail@mail.networksolutionsemail.com>\nCc: recipient list not shown: ;\nfrom: user1@winn-test.com\nsubject: test\n\ntesting again and again ...\n.\n", 4096) = 277
- [pid 10734] time(NULL) = 1326834828
- [pid 10734] open(".qmail-winn-test:com-user1", O_RDONLY|O_NONBLOCK) = -1 ENOENT (No such file or directory)
- [pid 10734] open(".qmail-winn-test:com-default", O_RDONLY|O_NONBLOCK) = -1 ENOENT (No such file or directory)
- [pid 10734] open(".qmail-winn-default", O_RDONLY|O_NONBLOCK) = -1 ENOENT (No such file or directory)
- [pid 10734] open(".qmail-default", O_RDONLY|O_NONBLOCK) = -1 ENOENT (No such file or directory)
- [pid 10734] write(2, "Sorry, no mailbox here by that name. (#5.1.1)\n", 46) = 46
- [pid 10658] <... select resumed> ) = 1 (in [3])
- [pid 10734] exit_group(100) = ?
- Process 10734 detached
- rt_sigprocmask(SIG_BLOCK, [CHLD], NULL, 8) = 0
- read(3, "Sorry, no mailbox here by that name. (#5.1.1)\n", 128) = 46
- rt_sigprocmask(SIG_UNBLOCK, [CHLD], NULL, 8) = 0
- --- {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10734, si_status=100, si_utime=0, si_stime=0} (Child exited) ---
- wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 100}], WNOHANG, NULL) = 10734
- close(4) = 0
- wait4(-1, 0x7fff3c226624, WNOHANG, NULL) = -1 ECHILD (No child processes)
- rt_sigreturn(0xffffffff) = 0
- select(4, [0 3], NULL, NULL, NULL) = 1 (in [3])
- rt_sigprocmask(SIG_BLOCK, [CHLD], NULL, 8) = 0
- read(3, "", 128) = 0
- write(1, "\0\0DSorry, no mailbox here by that name. (#5.1.1)\n\0", 50) = 50
- close(3) = 0
- rt_sigprocmask(SIG_UNBLOCK, [CHLD], NULL, 8) = 0
- select(1, [0], NULL, NULL, NULL) = 1 (in [0])
- rt_sigprocmask(SIG_BLOCK, [CHLD], NULL, 8) = 0
- read(0, "\0\000322/402721483\0\0root@mail.networksolutionsemail.com\0", 1024) = 53
- open("322/402721483", O_RDONLY|O_NONBLOCK) = 2
- fstat(2, {st_mode=S_IFREG|0644, st_size=733, ...}) = 0
- pipe([3, 4]) = 0
- fcntl(3, F_SETFD, FD_CLOEXEC) = 0
- clone(Process 10737 attached
- child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f621732d9d0) = 10737
- [pid 10658] close(2 <unfinished ...>
- [pid 10737] chdir("/var/qmail" <unfinished ...>
- [pid 10658] <... close resumed> ) = 0
- [pid 10737] <... chdir resumed> ) = 0
- [pid 10658] fcntl(4, F_SETFD, FD_CLOEXEC <unfinished ...>
- [pid 10737] open("users/cdb", O_RDONLY|O_NONBLOCK <unfinished ...>
- [pid 10658] <... fcntl resumed> ) = 0
- [pid 10658] rt_sigprocmask(SIG_UNBLOCK, [CHLD], NULL, 8) = 0
- [pid 10658] select(4, [0 3], NULL, NULL, NULL <unfinished ...>
- [pid 10737] <... open resumed> ) = 5
- [pid 10737] lseek(5, 40, SEEK_SET) = 40
- [pid 10737] read(5, "\321_\3\0\34\0\0\0", 8) = 8
- [pid 10737] lseek(5, 221305, SEEK_SET) = 221305
- [pid 10737] read(5, "\5\364\22o\247\375\0\0", 8) = 8
- [pid 10737] lseek(5, 221313, SEEK_SET) = 221313
- [pid 10737] read(5, "\5\31Ct\356\261\1\0", 8) = 8
- [pid 10737] lseek(5, 221321, SEEK_SET) = 221321
- [pid 10737] read(5, "\5\25\0\0\210[\3\0", 8) = 8
- [pid 10737] lseek(5, 220040, SEEK_SET) = 220040
- [pid 10737] read(5, "\0\0\0\0\1\0\0\0", 8) = 8
- [pid 10737] read(5, "-", 1) = 1
- [pid 10737] lseek(5, 1808, SEEK_SET) = 1808
- [pid 10737] read(5, "q\330\3\0\32\0\0\0", 8) = 8
- [pid 10737] lseek(5, 252017, SEEK_SET) = 252017
- [pid 10737] read(5, "\342~\237\220Qg\0\0", 8) = 8
- [pid 10737] lseek(5, 252025, SEEK_SET) = 252025
- [pid 10737] read(5, "\342\2\245\7F\332\1\0", 8) = 8
- [pid 10737] lseek(5, 252033, SEEK_SET) = 252033
- [pid 10737] read(5, "\342\322\200\235\354\337\1\0", 8) = 8
- [pid 10737] lseek(5, 252041, SEEK_SET) = 252041
- [pid 10737] read(5, "\0\0\0\0\0\0\0\0", 8) = 8
- [pid 10737] lseek(5, 1056, SEEK_SET) = 1056
- [pid 10737] read(5, "\261\245\3\0\32\0\0\0", 8) = 8
- [pid 10737] lseek(5, 239161, SEEK_SET) = 239161
- [pid 10737] read(5, "\204~\300\221\205\254\1\0", 8) = 8
- [pid 10737] lseek(5, 239169, SEEK_SET) = 239169
- [pid 10737] read(5, "\0\0\0\0\0\0\0\0", 8) = 8
- [pid 10737] close(5) = 0
- [pid 10737] pipe([5, 6]) = 0
- [pid 10737] vfork(Process 10738 attached (waiting for parent)
- Process 10738 resumed (parent 10737 ready)
- <unfinished ...>
- [pid 10738] setgroups(1, [70]) = 0
- [pid 10738] setgid(70) = 0
- [pid 10738] setuid(74) = 0
- [pid 10738] close(5) = 0
- [pid 10738] fcntl(6, F_GETFL) = 0x1 (flags O_WRONLY)
- [pid 10738] close(1) = 0
- [pid 10738] fcntl(6, F_DUPFD, 1) = 1
- [pid 10738] close(6) = 0
- [pid 10738] execve("bin/qmail-getpw", ["bin/qmail-getpw", "root"], [/* 1 var */] <unfinished ...>
- [pid 10737] <... vfork resumed> ) = 10738
- [pid 10737] close(6 <unfinished ...>
- [pid 10738] <... execve resumed> ) = 0
- [pid 10737] <... close resumed> ) = 0
- [pid 10737] read(5, <unfinished ...>
- [pid 10738] brk(0) = 0x605000
- [pid 10738] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faba5a5e000
- [pid 10738] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
- [pid 10738] open("/etc/ld.so.cache", O_RDONLY) = 3
- [pid 10738] fstat(3, {st_mode=S_IFREG|0644, st_size=56004, ...}) = 0
- [pid 10738] mmap(NULL, 56004, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7faba5a50000
- [pid 10738] close(3) = 0
- [pid 10738] open("/lib64/libc.so.6", O_RDONLY) = 3
- [pid 10738] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260!\2\0\0\0\0\0@\0\0\0\0\0\0\0\220k\30\0\0\0\0\0\0\0\0\0@\0008\0\v\0@\0E\0D\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0h\2\0\0\0\0\0\0h\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0008\17\30\0\0\0\0\0008\17\30\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\240F\0\0\0\0\0\0\360\224\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0@K\30\0\0\0\0\0@K8\0\0\0\0\0@K8\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\4\0\0\0\0\0\0\0\7\0\0\0\4\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\20\0\0\0\0\0\0\0h\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\214h\0\0\0\0\0\0\214h\0\0\0\0\0\0\4\0\0\0\0\0\0\0"..., 832) = 832
- [pid 10738] fstat(3, {st_mode=S_IFREG|0755, st_size=1604816, ...}) = 0
- [pid 10738] mmap(NULL, 3714056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7faba54b5000
- [pid 10738] mprotect(0x7faba5636000, 2097152, PROT_NONE) = 0
- [pid 10738] mmap(0x7faba5836000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x181000) = 0x7faba5836000
- [pid 10738] mmap(0x7faba583b000, 19464, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7faba583b000
- [pid 10738] close(3) = 0
- [pid 10738] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faba5a4f000
- [pid 10738] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faba5a4e000
- [pid 10738] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7faba5a4d000
- [pid 10738] arch_prctl(ARCH_SET_FS, 0x7faba5a4e700) = 0
- [pid 10738] mprotect(0x7faba5836000, 16384, PROT_READ) = 0
- [pid 10738] mprotect(0x602000, 4096, PROT_READ) = 0
- [pid 10738] mprotect(0x7faba5a5f000, 4096, PROT_READ) = 0
- [pid 10738] munmap(0x7faba5a50000, 56004) = 0
- [pid 10738] brk(0) = 0x605000
- [pid 10738] brk(0x626000) = 0x626000
- [pid 10738] socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- [pid 10738] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0
- [pid 10738] sendto(3, "\2\0\0\0\v\0\0\0\7\0\0\0passwd\0", 19, MSG_NOSIGNAL, NULL, 0) = 19
- [pid 10738] poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}])
- [pid 10738] recvmsg(3, {msg_name(0)=NULL, msg_iov(2)=[{"\0\0\0\0\0\0\0", 7}, {"\207\360\226|\0\0\0\0", 8}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 0
- [pid 10738] close(3) = 0
- [pid 10738] socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- [pid 10738] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0
- [pid 10738] sendto(3, "\2\0\0\0\0\0\0\0\5\0\0\0root\0", 17, MSG_NOSIGNAL, NULL, 0) = 17
- [pid 10738] poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}])
- [pid 10738] read(3, "\2\0\0\0\1\0\0\0\5\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\n\0\0\0\6\0\0\0\n\0\0\0", 36) = 36
- [pid 10738] read(3, "root\0x\0User root\0/root\0/bin/bash\0", 33) = 33
- [pid 10738] close(3) = 0
- [pid 10738] socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
- [pid 10738] connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = 0
- [pid 10738] sendto(3, "\2\0\0\0\0\0\0\0\6\0\0\0alias\0", 18, MSG_NOSIGNAL, NULL, 0) = 18
- [pid 10738] poll([{fd=3, events=POLLIN|POLLERR|POLLHUP}], 1, 5000) = 1 ([{fd=3, revents=POLLIN|POLLHUP}])
- [pid 10738] read(3, "\2\0\0\0\1\0\0\0\6\0\0\0\2\0\0\0G\0\0\0F\0\0\0\n\0\0\0\37\0\0\0\22\0\0\0", 36) = 36
- [pid 10738] read(3, "alias\0x\0base-user\0/usr/services/mail/qmail/alias\0/usr/sbin/nologin\0", 67) = 67
- [pid 10738] close(3) = 0
- [pid 10738] write(1, "alias\00071\00070\0/usr/services/mail/qmail/alias\0-\0root\0", 50) = 50
- [pid 10737] <... read resumed> "alias\00071\00070\0/usr/services/mail/qmail/alias\0-\0root\0", 128) = 50
- [pid 10738] exit_group(0) = ?
- Process 10738 detached
- [pid 10737] read(5, "", 128) = 0
- [pid 10737] close(5) = 0
- [pid 10737] wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0, NULL) = 10738
- [pid 10737] fcntl(2, F_GETFL) = 0x8800 (flags O_RDONLY|O_NONBLOCK|O_LARGEFILE)
- [pid 10737] close(0) = 0
- [pid 10737] fcntl(2, F_DUPFD, 0) = 0
- [pid 10737] close(2) = 0
- [pid 10737] fcntl(4, F_GETFL) = 0x1 (flags O_WRONLY)
- [pid 10737] close(1) = 0
- [pid 10737] fcntl(4, F_DUPFD, 1) = 1
- [pid 10737] close(4) = 0
- [pid 10737] fcntl(1, F_GETFL) = 0x1 (flags O_WRONLY)
- [pid 10737] close(2) = -1 EBADF (Bad file descriptor)
- [pid 10737] fcntl(1, F_DUPFD, 2) = 2
- [pid 10737] setgroups(1, [70]) = 0
- [pid 10737] setgid(70) = 0
- [pid 10737] setuid(71) = 0
- [pid 10737] getuid() = 71
- [pid 10737] execve("bin/qmail-local", ["bin/qmail-local", "--", "alias", "/usr/services/mail/qmail/alias", "root", "-", "root", "mail.networksolutionsemail.com", "", "./Mailbox"], [/* 1 var */]) = 0
- [pid 10737] brk(0) = 0x612000
- [pid 10737] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5775d9f000
- [pid 10737] access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
- [pid 10737] open("/etc/ld.so.cache", O_RDONLY) = 3
- [pid 10737] fstat(3, {st_mode=S_IFREG|0644, st_size=56004, ...}) = 0
- [pid 10737] mmap(NULL, 56004, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f5775d91000
- [pid 10737] close(3) = 0
- [pid 10737] open("/usr/lib64/libmailindex.so", O_RDONLY) = 3
- [pid 10737] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0p#\0\0\0\0\0\0@\0\0\0\0\0\0\0\30\303\0\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\31\0\30\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0<\265\0\0\0\0\0\0<\265\0\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\320\275\0\0\0\0\0\0\320\275 \0\0\0\0\0\320\275 \0\0\0\0\0\210\4\0\0\0\0\0\0\320\24\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\370\275\0\0\0\0\0\0\370\275 \0\0\0\0\0\370\275 \0\0\0\0\0\240\1\0\0\0\0\0\0\240\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\24\251\0\0\0\0\0\0\24\251\0\0\0\0\0\0\24\251\0\0\0\0\0\0D\2\0\0\0\0\0\0D\2\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0R\345td\4\0\0\0\320\275\0\0\0\0\0\0\320\275 \0\0\0\0\0\320\275 \0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\1\0\0\0\0\0\0\0\200\25\4e\0(\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0a\0\0\0o\0\0\0\0\0\0\0[\0\0\0W\0\0\0\17\0\0\0O\0\0\0\0\0\0\0\0\0\0\0S\0\0\0\0\0\0\0\0\0\0\0d\0\0\0c\0\0\0"..., 832) = 832
- [pid 10737] fstat(3, {st_mode=S_IFREG|0755, st_size=51544, ...}) = 0
- [pid 10737] mmap(NULL, 2151072, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f5775973000
- [pid 10737] mprotect(0x7f577597f000, 2093056, PROT_NONE) = 0
- [pid 10737] mmap(0x7f5775b7e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb000) = 0x7f5775b7e000
- [pid 10737] mmap(0x7f5775b80000, 672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f5775b80000
- [pid 10737] close(3) = 0
- [pid 10737] open("/lib64/libc.so.6", O_RDONLY) = 3
- [pid 10737] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\260!\2\0\0\0\0\0@\0\0\0\0\0\0\0\220k\30\0\0\0\0\0\0\0\0\0@\0008\0\v\0@\0E\0D\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0h\2\0\0\0\0\0\0h\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\320F\25\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0008\17\30\0\0\0\0\0008\17\30\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\240F\0\0\0\0\0\0\360\224\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0@K\30\0\0\0\0\0@K8\0\0\0\0\0@K8\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0\250\2\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\4\0\0\0\0\0\0\0\7\0\0\0\4\0\0\0\30\27\30\0\0\0\0\0\30\0278\0\0\0\0\0\30\0278\0\0\0\0\0\20\0\0\0\0\0\0\0h\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\354F\25\0\0\0\0\0\214h\0\0\0\0\0\0\214h\0\0\0\0\0\0\4\0\0\0\0\0\0\0"..., 832) = 832
- [pid 10737] fstat(3, {st_mode=S_IFREG|0755, st_size=1604816, ...}) = 0
- [pid 10737] mmap(NULL, 3714056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f57755e8000
- [pid 10737] mprotect(0x7f5775769000, 2097152, PROT_NONE) = 0
- [pid 10737] mmap(0x7f5775969000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x181000) = 0x7f5775969000
- [pid 10737] mmap(0x7f577596e000, 19464, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f577596e000
- [pid 10737] close(3) = 0
- [pid 10737] open("/usr/lib64/libdb-4.4.so", O_RDONLY) = 3
- [pid 10737] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360G\2\0\0\0\0\0@\0\0\0\0\0\0\0h4\30\0\0\0\0\0\0\0\0\0@\0008\0\7\0@\0\32\0\31\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\337\27\0\0\0\0\0\f\337\27\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\10\357\27\0\0\0\0\0\10\3577\0\0\0\0\0\10\3577\0\0\0\0\0\224D\0\0\0\0\0\0pH\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0h\377\27\0\0\0\0\0h\3777\0\0\0\0\0h\3777\0\0\0\0\0\260\1\0\0\0\0\0\0\260\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0P\345td\4\0\0\0\f\247\26\0\0\0\0\0\f\247\26\0\0\0\0\0\f\247\26\0\0\0\0\0\f;\0\0\0\0\0\0\f;\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0R\345td\4\0\0\0\10\357\27\0\0\0\0\0\10\3577\0\0\0\0\0\10\3577\0\0\0\0\0\370 \0\0\0\0\0\0\370 \0\0\0\0\0\0\1\0\0\0\0\0\0\0\200\25\4e\0(\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0\361\3\0\0\26\6\0\0O\3\0\0\221\5\0\0\30\4\0\0\24\6\0\0J\5\0\0j\2\0\0\325\1\0\0c\0\0\0(\4\0\0\264\2\0\0\235\5\0\0\0\0\0\0"..., 832) = 832
- [pid 10737] fstat(3, {st_mode=S_IFREG|0755, st_size=1587944, ...}) = 0
- [pid 10737] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5775d90000
- [pid 10737] mmap(NULL, 3684216, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f5775264000
- [pid 10737] mprotect(0x7f57753e2000, 2097152, PROT_NONE) = 0
- [pid 10737] mmap(0x7f57755e2000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17e000) = 0x7f57755e2000
- [pid 10737] close(3) = 0
- [pid 10737] open("/lib64/libpthread.so.0", O_RDONLY) = 3
- [pid 10737] read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340k\0\0\0\0\0\0@\0\0\0\0\0\0\0\320\204\1\0\0\0\0\0\0\0\0\0@\0008\0\n\0@\0$\0!\0\6\0\0\0\5\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0@\0\0\0\0\0\0\0000\2\0\0\0\0\0\0000\2\0\0\0\0\0\0\10\0\0\0\0\0\0\0\3\0\0\0\4\0\0\0`,\1\0\0\0\0\0`,\1\0\0\0\0\0`,\1\0\0\0\0\0\34\0\0\0\0\0\0\0\34\0\0\0\0\0\0\0\20\0\0\0\0\0\0\0\1\0\0\0\5\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\354p\1\0\0\0\0\0\354p\1\0\0\0\0\0\0\0 \0\0\0\0\0\1\0\0\0\6\0\0\0\250{\1\0\0\0\0\0\250{!\0\0\0\0\0\250{!\0\0\0\0\0\310\6\0\0\0\0\0\0\370G\0\0\0\0\0\0\0\0 \0\0\0\0\0\2\0\0\0\6\0\0\0\210}\1\0\0\0\0\0\210}!\0\0\0\0\0\210}!\0\0\0\0\0\360\1\0\0\0\0\0\0\360\1\0\0\0\0\0\0\10\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0p\2\0\0\0\0\0\0p\2\0\0\0\0\0\0p\2\0\0\0\0\0\0 \0\0\0\0\0\0\0 \0\0\0\0\0\0\0\4\0\0\0\0\0\0\0P\345td\4\0\0\0|,\1\0\0\0\0\0|,\1\0\0\0\0\0|,\1\0\0\0\0\0D\n\0\0\0\0\0\0D\n\0\0\0\0\0\0\4\0\0\0\0\0\0\0Q\345td\6\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\0\0\0\0"..., 832) = 832
- [pid 10737] fstat(3, {st_mode=S_IFREG|0755, st_size=135557, ...}) = 0
- [pid 10737] mmap(NULL, 2212768, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f5775047000
- [pid 10737] mprotect(0x7f577505f000, 2093056, PROT_NONE) = 0
- [pid 10737] mmap(0x7f577525e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x17000) = 0x7f577525e000
- [pid 10737] mmap(0x7f5775260000, 13216, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f5775260000
- [pid 10737] close(3) = 0
- [pid 10737] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5775d8f000
- [pid 10737] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5775d8e000
- [pid 10737] mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f5775d8d000
- [pid 10737] arch_prctl(ARCH_SET_FS, 0x7f5775d8e700) = 0
- [pid 10737] mprotect(0x7f577525e000, 4096, PROT_READ) = 0
- [pid 10737] mprotect(0x7f57755e2000, 12288, PROT_READ) = 0
- [pid 10737] mprotect(0x7f5775969000, 16384, PROT_READ) = 0
- [pid 10737] mprotect(0x7f5775b7e000, 4096, PROT_READ) = 0
- [pid 10737] mprotect(0x60d000, 4096, PROT_READ) = 0
- [pid 10737] mprotect(0x7f5775da0000, 4096, PROT_READ) = 0
- [pid 10737] munmap(0x7f5775d91000, 56004) = 0
- [pid 10737] set_tid_address(0x7f5775d8e9d0) = 10737
- [pid 10737] set_robust_list(0x7f5775d8e9e0, 0x18) = 0
- [pid 10737] futex(0x7fffb22a018c, FUTEX_WAKE_PRIVATE, 1) = 0
- [pid 10737] futex(0x7fffb22a018c, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 1, NULL, 7f5775d8e700) = -1 EAGAIN (Resource temporarily unavailable)
- [pid 10737] rt_sigaction(SIGRTMIN, {0x7f577504d660, [], SA_RESTORER|SA_SIGINFO, 0x7f57750572e0}, NULL, 8) = 0
- [pid 10737] rt_sigaction(SIGRT_1, {0x7f577504d6f0, [], SA_RESTORER|SA_RESTART|SA_SIGINFO, 0x7f57750572e0}, NULL, 8) = 0
- [pid 10737] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
- [pid 10737] getrlimit(RLIMIT_STACK, {rlim_cur=500000000, rlim_max=RLIM_INFINITY}) = 0
- [pid 10737] umask(077) = 077
- [pid 10737] rt_sigaction(SIGPIPE, {SIG_IGN, [], SA_RESTORER, 0x7f577561dad0}, NULL, 8) = 0
- [pid 10737] chdir("/usr/services/mail/qmail/alias") = 0
- [pid 10737] stat(".", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
- [pid 10737] lseek(0, 0, SEEK_SET) = 0
- [pid 10737] read(0, "Received: (qmail 10736 invoked for bounce); 17 Jan 2012 21:13:48 -0000\nDate: 17 Jan 2012 21:13:48 -0000\nFrom: MAILER-DAEMON@mail.networksolutionsemail.com\nTo: root@mail.networksolutionsemail.com\nSubject: failure notice\n\nYour message did not reach some or all of the intended recipients.\n\n<user1@winn-test.com>:\nSorry, no mailbox here by that name. (#5.1.1)\n\n--- Below this line is a copy of the message.\n\nReturn-Path: <root@mail.networksolutionsemail.com>\nReceived: (qmail 10733 invoked by uid 0); 17 Jan 2012 21"..., 4096) = 733
- [pid 10737] time(NULL) = 1326834828
- [pid 10737] open(".qmail-root", O_RDONLY|O_NONBLOCK) = 3
- [pid 10737] fstat(3, {st_mode=S_IFREG|0644, st_size=10, ...}) = 0
- [pid 10737] read(3, "/dev/null\n", 256) = 10
- [pid 10737] read(3, "", 256) = 0
- [pid 10737] close(3) = 0
- [pid 10737] lseek(0, 0, SEEK_SET) = 0
- [pid 10737] open("/dev/null", O_WRONLY|O_CREAT|O_APPEND|O_NONBLOCK, 0600) = 3
- [pid 10737] rt_sigaction(SIGALRM, {0x40178e, [], SA_RESTORER, 0x7f577561dad0}, NULL, 8) = 0
- [pid 10737] alarm(30) = 0
- [pid 10737] fcntl(3, F_SETLKW, {type=F_WRLCK, whence=SEEK_CUR, start=0, len=0}) = 0
- [pid 10737] alarm(0) = 30
- [pid 10737] rt_sigaction(SIGALRM, {SIG_DFL, [], SA_RESTORER, 0x7f577561dad0}, NULL, 8) = 0
- [pid 10737] lseek(3, 0, SEEK_END) = 0
- [pid 10737] lseek(3, 0, SEEK_CUR) = 0
- [pid 10737] read(0, "Received: (qmail 10736 invoked for bounce); 17 Jan 2012 21:13:48 -0000\nDate: 17 Jan 2012 21:13:48 -0000\nFrom: MAILER-DAEMON@mail.networksolutionsemail.com\nTo: root@mail.networksolutionsemail.com\nSubject: failure notice\n\nYour message did not reach some or all of the intended recipients.\n\n<user1@winn-test.com>:\nSorry, no mailbox here by that name. (#5.1.1)\n\n--- Below this line is a copy of the message.\n\nReturn-Path: <root@mail.networksolutionsemail.com>\nReceived: (qmail 10733 invoked by uid 0); 17 Jan 2012 21"..., 4096) = 733
- [pid 10737] read(0, "", 4096) = 0
- [pid 10737] write(3, "From MAILER-DAEMON Tue Jan 17 21:13:48 2012\nReturn-Path: <>\nDelivered-To: root@mail.networksolutionsemail.com\nReceived: (qmail 10736 invoked for bounce); 17 Jan 2012 21:13:48 -0000\nDate: 17 Jan 2012 21:13:48 -0000\nFrom: MAILER-DAEMON@mail.networksolutionsemail.com\nTo: root@mail.networksolutionsemail.com\nSubject: failure notice\n\nYour message did not reach some or all of the intended recipients.\n\n<user1@winn-test.com>:\nSorry, no mailbox here by that name. (#5.1.1)\n\n--- Below this line is a copy of the message"..., 844) = 844
- [pid 10737] fsync(3) = -1 EINVAL (Invalid argument)
- [pid 10737] close(3) = 0
- [pid 10737] write(1, "did 1+0+0\n", 10) = 10
- [pid 10658] <... select resumed> ) = 1 (in [3])
- [pid 10737] exit_group(0) = ?
- Process 10737 detached
- rt_sigprocmask(SIG_BLOCK, [CHLD], NULL, 8) = 0
- read(3, "did 1+0+0\n", 128) = 10
- rt_sigprocmask(SIG_UNBLOCK, [CHLD], NULL, 8) = 0
- --- {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=10737, si_status=0, si_utime=1, si_stime=0} (Child exited) ---
- wait4(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], WNOHANG, NULL) = 10737
- close(4) = 0
- wait4(-1, 0x7fff3c226624, WNOHANG, NULL) = -1 ECHILD (No child processes)
- rt_sigreturn(0xffffffff) = 0
- select(4, [0 3], NULL, NULL, NULL) = 1 (in [3])
- rt_sigprocmask(SIG_BLOCK, [CHLD], NULL, 8) = 0
- read(3, "", 128) = 0
- write(1, "\0\0Kdid 1+0+0\n\0", 14) = 14
- close(3) = 0
- rt_sigprocmask(SIG_UNBLOCK, [CHLD], NULL, 8) = 0
- select(1, [0], NULL, NULL, NULL^C
Add Comment
Please, Sign In to add comment