Advertisement
Guest User

Untitled

a guest
Dec 16th, 2017
1,332
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 167.45 KB | None | 0 0
  1. # kdump -f ./ktrace.out
  2. 36595 ktrace RET ktrace 0
  3. 36595 ktrace CALL execve(0x7fffffffed73,0x7fffffffeb00,0x7fffffffeb28)
  4. 36595 ktrace NAMI "/usr/sbin/syslogd"
  5. 36595 ktrace NAMI "/libexec/ld-elf.so.1"
  6. 36595 syslogd RET execve 0
  7. 36595 syslogd CALL mmap(0,0x8000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0)
  8. 36595 syslogd RET mmap 34366205952/0x80062b000
  9. 36595 syslogd CALL issetugid
  10. 36595 syslogd RET issetugid 0
  11. 36595 syslogd CALL lstat(0x80062f000,0x7fffffffd2c8)
  12. 36595 syslogd NAMI "/etc"
  13. 36595 syslogd STRU struct stat {dev=72, ino=10914816, mode=040755, nlink=27, uid=0, gid=0, rdev=21803136, atime=1478361012, mtime=1513390297.698501000, ctime=1513390297.698501000, birthtime=1475113537, size=2560, blksize=32768, blocks=8, flags=0x0 }
  14. 36595 syslogd RET lstat 0
  15. 36595 syslogd CALL lstat(0x80062f000,0x7fffffffd2c8)
  16. 36595 syslogd NAMI "/etc/libmap.conf"
  17. 36595 syslogd STRU struct stat {dev=72, ino=10915279, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810360, atime=1513377548.965984000, mtime=1513366167.444515000, ctime=1513366167.444607000, birthtime=1513366167.444384000, size=109, blksize=32768, blocks=8, flags=0x0 }
  18. 36595 syslogd RET lstat 0
  19. 36595 syslogd CALL openat(AT_FDCWD,0x80062f000,0x100000<O_RDONLY|O_CLOEXEC>)
  20. 36595 syslogd NAMI "/etc/libmap.conf"
  21. 36595 syslogd RET openat 3
  22. 36595 syslogd CALL fstat(0x3,0x7fffffffdf88)
  23. 36595 syslogd STRU struct stat {dev=72, ino=10915279, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810360, atime=1513377548.965984000, mtime=1513366167.444515000, ctime=1513366167.444607000, birthtime=1513366167.444384000, size=109, blksize=32768, blocks=8, flags=0x0 }
  24. 36595 syslogd RET fstat 0
  25. 36595 syslogd CALL mmap(0,0x6d,0x1<PROT_READ>,0x2<MAP_PRIVATE>,0x3,0)
  26. 36595 syslogd RET mmap 34366238720/0x800633000
  27. 36595 syslogd CALL close(0x3)
  28. 36595 syslogd RET close 0
  29. 36595 syslogd CALL lstat(0x80062f800,0x7fffffffc668)
  30. 36595 syslogd NAMI "/usr"
  31. 36595 syslogd STRU struct stat {dev=102, ino=2, mode=040755, nlink=19, uid=0, gid=0, rdev=13280, atime=1478361032, mtime=1500296483.604561000, ctime=1500296483.604561000, birthtime=1475113414, size=1024, blksize=32768, blocks=8, flags=0x0 }
  32. 36595 syslogd RET lstat 0
  33. 36595 syslogd CALL lstat(0x80062f800,0x7fffffffc668)
  34. 36595 syslogd NAMI "/usr/local"
  35. 36595 syslogd STRU struct stat {dev=102, ino=22391424, mode=040755, nlink=18, uid=0, gid=0, rdev=44723176, atime=1478361012, mtime=1513389677.677315000, ctime=1513389728.626996000, birthtime=1475113414, size=512, blksize=32768, blocks=8, flags=0x0 }
  36. 36595 syslogd RET lstat 0
  37. 36595 syslogd CALL lstat(0x80062f800,0x7fffffffc668)
  38. 36595 syslogd NAMI "/usr/local/etc"
  39. 36595 syslogd STRU struct stat {dev=102, ino=22391433, mode=040755, nlink=35, uid=0, gid=0, rdev=44723184, atime=1478361255.160497000, mtime=1513434102.838553000, ctime=1513434102.838553000, birthtime=1478361255.160486000, size=2048, blksize=32768, blocks=8, flags=0x0 }
  40. 36595 syslogd RET lstat 0
  41. 36595 syslogd CALL lstat(0x80062f800,0x7fffffffc668)
  42. 36595 syslogd NAMI "/usr/local/etc/libmap.d"
  43. 36595 syslogd RET lstat -1 errno 2 No such file or directory
  44. 36595 syslogd CALL munmap(0x800633000,0x6d)
  45. 36595 syslogd RET munmap 0
  46. 36595 syslogd CALL openat(AT_FDCWD,0x8006242a9,0x100000<O_RDONLY|O_CLOEXEC>)
  47. 36595 syslogd NAMI "/var/run/ld-elf.so.hints"
  48. 36595 syslogd RET openat 3
  49. 36595 syslogd CALL read(0x3,0x80082bb68,0x80)
  50. 36595 syslogd GIO fd 3 read 128 bytes
  51. 0x0000 4568 6e74 0100 0000 8000 0000 fc00 0000 0000 0000 fb00 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 |Ehnt......................................|
  52. 0x002a 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 |..........................................|
  53. 0x0054 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 0000 |..........................................|
  54. 0x007e 0000 |..|
  55.  
  56. 36595 syslogd RET read 128/0x80
  57. 36595 syslogd CALL fstat(0x3,0x7fffffffd810)
  58. 36595 syslogd STRU struct stat {dev=101, ino=4975917, mode=0100444, nlink=1, uid=0, gid=0, rdev=9948997, atime=1513434201.699913000, mtime=1513434201.699999000, ctime=1513434201.700063000, birthtime=1513434201.699911000, size=380, blksize=32768, blocks=8, flags=0x0 }
  59. 36595 syslogd RET fstat 0
  60. 36595 syslogd CALL lseek(0x3,0x80,SEEK_SET)
  61. 36595 syslogd RET lseek 128/0x80
  62. 36595 syslogd CALL read(0x3,0x800630000,0xfc)
  63. 36595 syslogd GIO fd 3 read 252 bytes
  64. "/lib:/usr/lib:/usr/lib/compat:/usr/local/lib:/usr/local/lib/compat/pkg:/usr/local/lib/courier-authlib:/usr/local/lib/freeradius-3.0.15:/usr/local/lib/mysql:\
  65. /usr/local/lib/mysql/plugin:/usr/local/lib/perl5/5.24/mach/CORE:/usr/local/lib/teamspeak/server\0"
  66. 36595 syslogd RET read 252/0xfc
  67. 36595 syslogd CALL close(0x3)
  68. 36595 syslogd RET close 0
  69. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  70. 36595 syslogd NAMI "/lib/libutil.so.9"
  71. 36595 syslogd RET access 0
  72. 36595 syslogd CALL openat(AT_FDCWD,0x80062c080,0x300000<O_RDONLY|O_CLOEXEC|O_VERIFY>)
  73. 36595 syslogd NAMI "/lib/libutil.so.9"
  74. 36595 syslogd RET openat 3
  75. 36595 syslogd CALL fstat(0x3,0x7fffffffdb48)
  76. 36595 syslogd STRU struct stat {dev=72, ino=10032118, mode=0100444, nlink=1, uid=0, gid=0, rdev=20051248, atime=1513377548.966110000, mtime=1513366163.698409000, ctime=1513366163.698472000, birthtime=1513366163.698198000, size=77144, blksize=32768, blocks=152, flags=0x0 }
  77. 36595 syslogd RET fstat 0
  78. 36595 syslogd CALL mmap(0,0x1000,0x1<PROT_READ>,0x40002<MAP_PRIVATE|MAP_PREFAULT_READ>,0x3,0)
  79. 36595 syslogd RET mmap 34366238720/0x800633000
  80. 36595 syslogd CALL mmap(0,0x214000,0<PROT_NONE>,0x21002<MAP_PRIVATE|MAP_ANON|MAP_NOCORE>,0xffffffff,0)
  81. 36595 syslogd RET mmap 34368307200/0x80082c000
  82. 36595 syslogd CALL mmap(0x80082c000,0x11000,0x5<PROT_READ|PROT_EXEC>,0x60012<MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ>,0x3,0)
  83. 36595 syslogd RET mmap 34368307200/0x80082c000
  84. 36595 syslogd CALL mmap(0x800a3d000,0x1000,0x3<PROT_READ|PROT_WRITE>,0x40012<MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ>,0x3,0x11000)
  85. 36595 syslogd RET mmap 34370473984/0x800a3d000
  86. 36595 syslogd CALL mmap(0x800a3e000,0x2000,0x3<PROT_READ|PROT_WRITE>,0x1012<MAP_PRIVATE|MAP_FIXED|MAP_ANON>,0xffffffff,0)
  87. 36595 syslogd RET mmap 34370478080/0x800a3e000
  88. 36595 syslogd CALL munmap(0x800633000,0x1000)
  89. 36595 syslogd RET munmap 0
  90. 36595 syslogd CALL close(0x3)
  91. 36595 syslogd RET close 0
  92. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  93. 36595 syslogd NAMI "/lib/libc.so.7"
  94. 36595 syslogd RET access 0
  95. 36595 syslogd CALL openat(AT_FDCWD,0x80062c0c0,0x300000<O_RDONLY|O_CLOEXEC|O_VERIFY>)
  96. 36595 syslogd NAMI "/lib/libc.so.7"
  97. 36595 syslogd RET openat 3
  98. 36595 syslogd CALL fstat(0x3,0x7fffffffdb48)
  99. 36595 syslogd STRU struct stat {dev=72, ino=10032086, mode=0100444, nlink=1, uid=0, gid=0, rdev=20048552, atime=1513377548.966249000, mtime=1513366163.195433000, ctime=1513366600.290987000, birthtime=1513366163.191647000, size=1761320, blksize=32768, blocks=3520, flags=0x0 }
  100. 36595 syslogd RET fstat 0
  101. 36595 syslogd CALL mmap(0,0x1000,0x1<PROT_READ>,0x40002<MAP_PRIVATE|MAP_PREFAULT_READ>,0x3,0)
  102. 36595 syslogd RET mmap 34366238720/0x800633000
  103. 36595 syslogd CALL mmap(0,0x3b8000,0<PROT_NONE>,0x21002<MAP_PRIVATE|MAP_ANON|MAP_NOCORE>,0xffffffff,0)
  104. 36595 syslogd RET mmap 34370486272/0x800a40000
  105. 36595 syslogd CALL mmap(0x800a40000,0x192000,0x5<PROT_READ|PROT_EXEC>,0x60012<MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ>,0x3,0)
  106. 36595 syslogd RET mmap 34370486272/0x800a40000
  107. 36595 syslogd CALL mmap(0x800dd2000,0xc000,0x3<PROT_READ|PROT_WRITE>,0x40012<MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ>,0x3,0x192000)
  108. 36595 syslogd RET mmap 34374230016/0x800dd2000
  109. 36595 syslogd CALL mmap(0x800dde000,0x1a000,0x3<PROT_READ|PROT_WRITE>,0x1012<MAP_PRIVATE|MAP_FIXED|MAP_ANON>,0xffffffff,0)
  110. 36595 syslogd RET mmap 34374279168/0x800dde000
  111. 36595 syslogd CALL munmap(0x800633000,0x1000)
  112. 36595 syslogd RET munmap 0
  113. 36595 syslogd CALL close(0x3)
  114. 36595 syslogd RET close 0
  115. 36595 syslogd CALL munmap(0x800632000,0x1000)
  116. 36595 syslogd RET munmap 0
  117. 36595 syslogd CALL mmap(0,0xa000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0)
  118. 36595 syslogd RET mmap 34366234624/0x800632000
  119. 36595 syslogd CALL munmap(0x800635000,0x7000)
  120. 36595 syslogd RET munmap 0
  121. 36595 syslogd CALL mmap(0,0x19000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0)
  122. 36595 syslogd RET mmap 34366246912/0x800635000
  123. 36595 syslogd CALL sysarch(0x81,0x7fffffffe028)
  124. 36595 syslogd RET sysarch 0
  125. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffdff0)
  126. 36595 syslogd RET sigprocmask 0
  127. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  128. 36595 syslogd RET sigprocmask 0
  129. 36595 syslogd CALL readlink(0x800ba3258,0x7fffffffd720,0x400)
  130. 36595 syslogd NAMI "/etc/malloc.conf"
  131. 36595 syslogd RET readlink -1 errno 2 No such file or directory
  132. 36595 syslogd CALL issetugid
  133. 36595 syslogd RET issetugid 0
  134. 36595 syslogd CALL __sysctl(0x7fffffffd5c0,0x2,0x7fffffffd610,0x7fffffffd608,0x800ba1c93,0xd)
  135. 36595 syslogd SCTL "sysctl.name2oid"
  136. 36595 syslogd RET __sysctl 0
  137. 36595 syslogd CALL __sysctl(0x7fffffffd610,0x2,0x7fffffffd6d4,0x7fffffffd6c8,0,0)
  138. 36595 syslogd SCTL "vm.overcommit"
  139. 36595 syslogd RET __sysctl 0
  140. 36595 syslogd CALL mmap(0,0x200000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0)
  141. 36595 syslogd RET mmap 34374385664/0x800df8000
  142. 36595 syslogd CALL munmap(0x800df8000,0x200000)
  143. 36595 syslogd RET munmap 0
  144. 36595 syslogd CALL mmap(0,0x3ff000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0)
  145. 36595 syslogd RET mmap 34374385664/0x800df8000
  146. 36595 syslogd CALL munmap(0x800df8000,0x8000)
  147. 36595 syslogd RET munmap 0
  148. 36595 syslogd CALL munmap(0x801000000,0x1f7000)
  149. 36595 syslogd RET munmap 0
  150. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffdb70)
  151. 36595 syslogd RET sigprocmask 0
  152. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  153. 36595 syslogd RET sigprocmask 0
  154. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffdb70)
  155. 36595 syslogd RET sigprocmask 0
  156. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  157. 36595 syslogd RET sigprocmask 0
  158. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffdb70)
  159. 36595 syslogd RET sigprocmask 0
  160. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  161. 36595 syslogd RET sigprocmask 0
  162. 36595 syslogd CALL madvise(0,0,MADV_PROTECT)
  163. 36595 syslogd RET madvise 0
  164. 36595 syslogd CALL mmap(0,0x200000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0)
  165. 36595 syslogd RET mmap 34376515584/0x801000000
  166. 36595 syslogd CALL openat(AT_FDCWD,0x801016004,0x100205<O_WRONLY|O_NONBLOCK|O_CREAT|O_CLOEXEC>,0600<S_IRUSR|S_IWUSR>)
  167. 36595 syslogd NAMI "/var/run/syslog.pid"
  168. 36595 syslogd RET openat 3
  169. 36595 syslogd CALL flock(0x3,0x6<LOCK_EX|LOCK_NB>)
  170. 36595 syslogd RET flock 0
  171. 36595 syslogd CALL stat(0x801016004,0x7fffffffda40)
  172. 36595 syslogd NAMI "/var/run/syslog.pid"
  173. 36595 syslogd STRU struct stat {dev=101, ino=4975875, mode=0100600, nlink=1, uid=0, gid=0, rdev=0, atime=1513434223.679455000, mtime=1513434223.679455000, ctime=1513434223.679455000, birthtime=1513434223.679452000, size=0, blksize=32768, blocks=0, flags=0x0 }
  174. 36595 syslogd RET stat 0
  175. 36595 syslogd CALL fstat(0x3,0x7fffffffd9c8)
  176. 36595 syslogd STRU struct stat {dev=101, ino=4975875, mode=0100600, nlink=1, uid=0, gid=0, rdev=0, atime=1513434223.679455000, mtime=1513434223.679455000, ctime=1513434223.679455000, birthtime=1513434223.679452000, size=0, blksize=32768, blocks=0, flags=0x0 }
  177. 36595 syslogd RET fstat 0
  178. 36595 syslogd CALL ftruncate(0x3,0)
  179. 36595 syslogd RET ftruncate 0
  180. 36595 syslogd CALL fstat(0x3,0x7fffffffdb30)
  181. 36595 syslogd STRU struct stat {dev=101, ino=4975875, mode=0100600, nlink=1, uid=0, gid=0, rdev=0, atime=1513434223.679455000, mtime=1513434223.679557000, ctime=1513434223.679557000, birthtime=1513434223.679452000, size=0, blksize=32768, blocks=0, flags=0x0 }
  182. 36595 syslogd RET fstat 0
  183. 36595 syslogd CALL fstat(0x1,0x7fffffffdae0)
  184. 36595 syslogd STRU struct stat {dev=1895890688, ino=121, mode=020620, nlink=1, uid=1001, gid=4, rdev=121, atime=1513434223, mtime=1513434223, ctime=1513434223, birthtime=-1, size=0, blksize=4096, blocks=0, flags=0x0 }
  185. 36595 syslogd RET fstat 0
  186. 36595 syslogd CALL __sysctl(0x7fffffffdbc0,0x2,0x800de0af0,0x7fffffffdbb8,0,0)
  187. 36595 syslogd SCTL "kern.bootfile"
  188. 36595 syslogd RET __sysctl 0
  189. 36595 syslogd CALL sigaction(SIGTERM,0x7fffffffdba8,0x7fffffffdb88)
  190. 36595 syslogd RET sigaction 0
  191. 36595 syslogd CALL sigaction(SIGINT,0x7fffffffdba8,0x7fffffffdb88)
  192. 36595 syslogd RET sigaction 0
  193. 36595 syslogd CALL sigaction(SIGQUIT,0x7fffffffdba8,0x7fffffffdb88)
  194. 36595 syslogd RET sigaction 0
  195. 36595 syslogd CALL sigaction(SIGCHLD,0x7fffffffea00,0)
  196. 36595 syslogd RET sigaction 0
  197. 36595 syslogd CALL sigaction(SIGALRM,0x7fffffffdba8,0x7fffffffdb88)
  198. 36595 syslogd RET sigaction 0
  199. 36595 syslogd CALL sigaction(SIGPIPE,0x7fffffffdba8,0x7fffffffdb88)
  200. 36595 syslogd RET sigaction 0
  201. 36595 syslogd CALL setitimer(0,0x7fffffffdbb0,0x7fffffffdb90)
  202. 36595 syslogd STRU itimerval { .interval = {0, 0}, .value = {30, 0} }
  203. 36595 syslogd STRU itimerval { .interval = {0, 0}, .value = {0, 0} }
  204. 36595 syslogd RET setitimer 0
  205. 36595 syslogd CALL unlink(0x408c36)
  206. 36595 syslogd NAMI "/var/run/log"
  207. 36595 syslogd RET unlink -1 errno 2 No such file or directory
  208. 36595 syslogd CALL socket(PF_LOCAL,0x2<SOCK_DGRAM>,0)
  209. 36595 syslogd RET socket 4
  210. 36595 syslogd CALL bind(0x4,0x7fffffffe8c0,0xe)
  211. 36595 syslogd STRU struct sockaddr { AF_LOCAL, /var/run/log }
  212. 36595 syslogd NAMI "/var/run/log"
  213. 36595 syslogd RET bind 0
  214. 36595 syslogd CALL chmod(0x408c36,0666<S_IRUSR|S_IWUSR|S_IRGRP|S_IWGRP|S_IROTH|S_IWOTH>)
  215. 36595 syslogd NAMI "/var/run/log"
  216. 36595 syslogd RET chmod 0
  217. 36595 syslogd CALL getsockopt(0x4,SOL_SOCKET,SO_RCVBUF,0x7fffffffe490,0x7fffffffe080)
  218. 36595 syslogd RET getsockopt 0
  219. 36595 syslogd CALL setsockopt(0x4,SOL_SOCKET,SO_RCVBUF,0x7fffffffe490,0x4)
  220. 36595 syslogd RET setsockopt 0
  221. 36595 syslogd CALL unlink(0x408c25)
  222. 36595 syslogd NAMI "/var/run/logpriv"
  223. 36595 syslogd RET unlink -1 errno 2 No such file or directory
  224. 36595 syslogd CALL socket(PF_LOCAL,0x2<SOCK_DGRAM>,0)
  225. 36595 syslogd RET socket 5
  226. 36595 syslogd CALL bind(0x5,0x7fffffffe8c0,0x12)
  227. 36595 syslogd STRU struct sockaddr { AF_LOCAL, /var/run/logpriv }
  228. 36595 syslogd NAMI "/var/run/logpriv"
  229. 36595 syslogd RET bind 0
  230. 36595 syslogd CALL chmod(0x408c25,0600<S_IRUSR|S_IWUSR>)
  231. 36595 syslogd NAMI "/var/run/logpriv"
  232. 36595 syslogd RET chmod 0
  233. 36595 syslogd CALL getsockopt(0x5,SOL_SOCKET,SO_RCVBUF,0x7fffffffe490,0x7fffffffe080)
  234. 36595 syslogd RET getsockopt 0
  235. 36595 syslogd CALL setsockopt(0x5,SOL_SOCKET,SO_RCVBUF,0x7fffffffe490,0x4)
  236. 36595 syslogd RET setsockopt 0
  237. 36595 syslogd CALL stat(0x800baaf9c,0x7fffffffd630)
  238. 36595 syslogd NAMI "/etc/nsswitch.conf"
  239. 36595 syslogd STRU struct stat {dev=72, ino=10915312, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810440, atime=1513366167.744115000, mtime=1513366167.744226000, ctime=1513366167.744303000, birthtime=1513366167.744113000, size=338, blksize=32768, blocks=8, flags=0x0 }
  240. 36595 syslogd RET stat 0
  241. 36595 syslogd CALL open(0x800baaf9c,0x100000<O_RDONLY|O_CLOEXEC>)
  242. 36595 syslogd NAMI "/etc/nsswitch.conf"
  243. 36595 syslogd RET open 6
  244. 36595 syslogd CALL ioctl(0x6,TIOCGETA,0x7fffffffd3d0)
  245. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  246. 36595 syslogd CALL fstat(0x6,0x7fffffffd2e8)
  247. 36595 syslogd STRU struct stat {dev=72, ino=10915312, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810440, atime=1513366167.744115000, mtime=1513366167.744226000, ctime=1513366167.744303000, birthtime=1513366167.744113000, size=338, blksize=32768, blocks=8, flags=0x0 }
  248. 36595 syslogd RET fstat 0
  249. 36595 syslogd CALL read(0x6,0x80103c640,0x8000)
  250. 36595 syslogd GIO fd 6 read 338 bytes
  251. "#
  252. # nsswitch.conf(5) - name service switch configuration file
  253. # $FreeBSD: releng/11.1/etc/nsswitch.conf 301711 2016-06-09 01:28:44Z markj $
  254. #
  255. group: compat
  256. group_compat: nis
  257. hosts: files dns
  258. netgroup: compat
  259. networks: files
  260. passwd: compat
  261. passwd_compat: nis
  262. shells: files
  263. services: compat
  264. services_compat: nis
  265. protocols: files
  266. rpc: files
  267. "
  268. 36595 syslogd RET read 338/0x152
  269. 36595 syslogd CALL read(0x6,0x80103c640,0x8000)
  270. 36595 syslogd GIO fd 6 read 0 bytes
  271. ""
  272. 36595 syslogd RET read 0
  273. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffc690)
  274. 36595 syslogd RET sigprocmask 0
  275. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  276. 36595 syslogd NAMI "/lib/nss_compat.so.1"
  277. 36595 syslogd RET access -1 errno 2 No such file or directory
  278. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  279. 36595 syslogd NAMI "/usr/lib/nss_compat.so.1"
  280. 36595 syslogd RET access -1 errno 2 No such file or directory
  281. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  282. 36595 syslogd NAMI "/usr/lib/compat/nss_compat.so.1"
  283. 36595 syslogd RET access -1 errno 2 No such file or directory
  284. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  285. 36595 syslogd NAMI "/usr/local/lib/nss_compat.so.1"
  286. 36595 syslogd RET access -1 errno 2 No such file or directory
  287. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  288. 36595 syslogd NAMI "/usr/local/lib/compat/pkg/nss_compat.so.1"
  289. 36595 syslogd RET access -1 errno 2 No such file or directory
  290. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  291. 36595 syslogd NAMI "/usr/local/lib/courier-authlib/nss_compat.so.1"
  292. 36595 syslogd RET access -1 errno 2 No such file or directory
  293. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  294. 36595 syslogd NAMI "/usr/local/lib/freeradius-3.0.15/nss_compat.so.1"
  295. 36595 syslogd RET access -1 errno 2 No such file or directory
  296. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  297. 36595 syslogd NAMI "/usr/local/lib/mysql/nss_compat.so.1"
  298. 36595 syslogd RET access -1 errno 2 No such file or directory
  299. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  300. 36595 syslogd NAMI "/usr/local/lib/mysql/plugin/nss_compat.so.1"
  301. 36595 syslogd RET access -1 errno 2 No such file or directory
  302. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  303. 36595 syslogd NAMI "/usr/local/lib/perl5/5.24/mach/CORE/nss_compat.so.1"
  304. 36595 syslogd RET access -1 errno 2 No such file or directory
  305. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  306. 36595 syslogd NAMI "/usr/local/lib/teamspeak/server/nss_compat.so.1"
  307. 36595 syslogd RET access -1 errno 2 No such file or directory
  308. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  309. 36595 syslogd NAMI "/lib/casper/nss_compat.so.1"
  310. 36595 syslogd RET access -1 errno 2 No such file or directory
  311. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  312. 36595 syslogd NAMI "/lib/nss_compat.so.1"
  313. 36595 syslogd RET access -1 errno 2 No such file or directory
  314. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  315. 36595 syslogd NAMI "/usr/lib/nss_compat.so.1"
  316. 36595 syslogd RET access -1 errno 2 No such file or directory
  317. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  318. 36595 syslogd RET sigprocmask 0
  319. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffc690)
  320. 36595 syslogd RET sigprocmask 0
  321. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  322. 36595 syslogd NAMI "/lib/nss_nis.so.1"
  323. 36595 syslogd RET access -1 errno 2 No such file or directory
  324. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  325. 36595 syslogd NAMI "/usr/lib/nss_nis.so.1"
  326. 36595 syslogd RET access -1 errno 2 No such file or directory
  327. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  328. 36595 syslogd NAMI "/usr/lib/compat/nss_nis.so.1"
  329. 36595 syslogd RET access -1 errno 2 No such file or directory
  330. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  331. 36595 syslogd NAMI "/usr/local/lib/nss_nis.so.1"
  332. 36595 syslogd RET access -1 errno 2 No such file or directory
  333. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  334. 36595 syslogd NAMI "/usr/local/lib/compat/pkg/nss_nis.so.1"
  335. 36595 syslogd RET access -1 errno 2 No such file or directory
  336. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  337. 36595 syslogd NAMI "/usr/local/lib/courier-authlib/nss_nis.so.1"
  338. 36595 syslogd RET access -1 errno 2 No such file or directory
  339. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  340. 36595 syslogd NAMI "/usr/local/lib/freeradius-3.0.15/nss_nis.so.1"
  341. 36595 syslogd RET access -1 errno 2 No such file or directory
  342. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  343. 36595 syslogd NAMI "/usr/local/lib/mysql/nss_nis.so.1"
  344. 36595 syslogd RET access -1 errno 2 No such file or directory
  345. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  346. 36595 syslogd NAMI "/usr/local/lib/mysql/plugin/nss_nis.so.1"
  347. 36595 syslogd RET access -1 errno 2 No such file or directory
  348. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  349. 36595 syslogd NAMI "/usr/local/lib/perl5/5.24/mach/CORE/nss_nis.so.1"
  350. 36595 syslogd RET access -1 errno 2 No such file or directory
  351. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  352. 36595 syslogd NAMI "/usr/local/lib/teamspeak/server/nss_nis.so.1"
  353. 36595 syslogd RET access -1 errno 2 No such file or directory
  354. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  355. 36595 syslogd NAMI "/lib/casper/nss_nis.so.1"
  356. 36595 syslogd RET access -1 errno 2 No such file or directory
  357. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  358. 36595 syslogd NAMI "/lib/nss_nis.so.1"
  359. 36595 syslogd RET access -1 errno 2 No such file or directory
  360. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  361. 36595 syslogd NAMI "/usr/lib/nss_nis.so.1"
  362. 36595 syslogd RET access -1 errno 2 No such file or directory
  363. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  364. 36595 syslogd RET sigprocmask 0
  365. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffc690)
  366. 36595 syslogd RET sigprocmask 0
  367. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  368. 36595 syslogd NAMI "/lib/nss_files.so.1"
  369. 36595 syslogd RET access -1 errno 2 No such file or directory
  370. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  371. 36595 syslogd NAMI "/usr/lib/nss_files.so.1"
  372. 36595 syslogd RET access -1 errno 2 No such file or directory
  373. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  374. 36595 syslogd NAMI "/usr/lib/compat/nss_files.so.1"
  375. 36595 syslogd RET access -1 errno 2 No such file or directory
  376. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  377. 36595 syslogd NAMI "/usr/local/lib/nss_files.so.1"
  378. 36595 syslogd RET access -1 errno 2 No such file or directory
  379. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  380. 36595 syslogd NAMI "/usr/local/lib/compat/pkg/nss_files.so.1"
  381. 36595 syslogd RET access -1 errno 2 No such file or directory
  382. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  383. 36595 syslogd NAMI "/usr/local/lib/courier-authlib/nss_files.so.1"
  384. 36595 syslogd RET access -1 errno 2 No such file or directory
  385. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  386. 36595 syslogd NAMI "/usr/local/lib/freeradius-3.0.15/nss_files.so.1"
  387. 36595 syslogd RET access -1 errno 2 No such file or directory
  388. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  389. 36595 syslogd NAMI "/usr/local/lib/mysql/nss_files.so.1"
  390. 36595 syslogd RET access -1 errno 2 No such file or directory
  391. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  392. 36595 syslogd NAMI "/usr/local/lib/mysql/plugin/nss_files.so.1"
  393. 36595 syslogd RET access -1 errno 2 No such file or directory
  394. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  395. 36595 syslogd NAMI "/usr/local/lib/perl5/5.24/mach/CORE/nss_files.so.1"
  396. 36595 syslogd RET access -1 errno 2 No such file or directory
  397. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  398. 36595 syslogd NAMI "/usr/local/lib/teamspeak/server/nss_files.so.1"
  399. 36595 syslogd RET access -1 errno 2 No such file or directory
  400. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  401. 36595 syslogd NAMI "/lib/casper/nss_files.so.1"
  402. 36595 syslogd RET access -1 errno 2 No such file or directory
  403. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  404. 36595 syslogd NAMI "/lib/nss_files.so.1"
  405. 36595 syslogd RET access -1 errno 2 No such file or directory
  406. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  407. 36595 syslogd NAMI "/usr/lib/nss_files.so.1"
  408. 36595 syslogd RET access -1 errno 2 No such file or directory
  409. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  410. 36595 syslogd RET sigprocmask 0
  411. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffc690)
  412. 36595 syslogd RET sigprocmask 0
  413. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  414. 36595 syslogd NAMI "/lib/nss_dns.so.1"
  415. 36595 syslogd RET access -1 errno 2 No such file or directory
  416. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  417. 36595 syslogd NAMI "/usr/lib/nss_dns.so.1"
  418. 36595 syslogd RET access -1 errno 2 No such file or directory
  419. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  420. 36595 syslogd NAMI "/usr/lib/compat/nss_dns.so.1"
  421. 36595 syslogd RET access -1 errno 2 No such file or directory
  422. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  423. 36595 syslogd NAMI "/usr/local/lib/nss_dns.so.1"
  424. 36595 syslogd RET access -1 errno 2 No such file or directory
  425. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  426. 36595 syslogd NAMI "/usr/local/lib/compat/pkg/nss_dns.so.1"
  427. 36595 syslogd RET access -1 errno 2 No such file or directory
  428. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  429. 36595 syslogd NAMI "/usr/local/lib/courier-authlib/nss_dns.so.1"
  430. 36595 syslogd RET access -1 errno 2 No such file or directory
  431. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  432. 36595 syslogd NAMI "/usr/local/lib/freeradius-3.0.15/nss_dns.so.1"
  433. 36595 syslogd RET access -1 errno 2 No such file or directory
  434. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  435. 36595 syslogd NAMI "/usr/local/lib/mysql/nss_dns.so.1"
  436. 36595 syslogd RET access -1 errno 2 No such file or directory
  437. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  438. 36595 syslogd NAMI "/usr/local/lib/mysql/plugin/nss_dns.so.1"
  439. 36595 syslogd RET access -1 errno 2 No such file or directory
  440. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  441. 36595 syslogd NAMI "/usr/local/lib/perl5/5.24/mach/CORE/nss_dns.so.1"
  442. 36595 syslogd RET access -1 errno 2 No such file or directory
  443. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  444. 36595 syslogd NAMI "/usr/local/lib/teamspeak/server/nss_dns.so.1"
  445. 36595 syslogd RET access -1 errno 2 No such file or directory
  446. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  447. 36595 syslogd NAMI "/lib/casper/nss_dns.so.1"
  448. 36595 syslogd RET access -1 errno 2 No such file or directory
  449. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  450. 36595 syslogd NAMI "/lib/nss_dns.so.1"
  451. 36595 syslogd RET access -1 errno 2 No such file or directory
  452. 36595 syslogd CALL access(0x80062f800,0<F_OK>)
  453. 36595 syslogd NAMI "/usr/lib/nss_dns.so.1"
  454. 36595 syslogd RET access -1 errno 2 No such file or directory
  455. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  456. 36595 syslogd RET sigprocmask 0
  457. 36595 syslogd CALL ioctl(0x6,TIOCGETA,0x7fffffffd3a0)
  458. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  459. 36595 syslogd CALL close(0x6)
  460. 36595 syslogd RET close 0
  461. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffcb40)
  462. 36595 syslogd RET sigprocmask 0
  463. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  464. 36595 syslogd RET sigprocmask 0
  465. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffd410)
  466. 36595 syslogd RET sigprocmask 0
  467. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  468. 36595 syslogd RET sigprocmask 0
  469. 36595 syslogd CALL open(0x800ba8233,0x100000<O_RDONLY|O_CLOEXEC>)
  470. 36595 syslogd NAMI "/etc/services"
  471. 36595 syslogd RET open 6
  472. 36595 syslogd CALL fstat(0x6,0x7fffffffd268)
  473. 36595 syslogd STRU struct stat {dev=72, ino=10915578, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810760, atime=1513366169.485528000, mtime=1513366169.485769000, ctime=1513366169.485863000, birthtime=1513366169.485525000, size=86246, blksize=32768, blocks=176, flags=0x0 }
  474. 36595 syslogd RET fstat 0
  475. 36595 syslogd CALL lseek(0x6,0,SEEK_CUR)
  476. 36595 syslogd RET lseek 0
  477. 36595 syslogd CALL lseek(0x6,0,SEEK_SET)
  478. 36595 syslogd RET lseek 0
  479. 36595 syslogd CALL read(0x6,0x80103c640,0x8000)
  480. 36595 syslogd GIO fd 6 read 4096 bytes
  481. "#
  482. # Network services, Internet style
  483. #
  484. # Note that it is presently the policy of IANA to assign a single well-known
  485. # port number for both TCP and UDP; hence, most entries here have two entries
  486. # even if the protocol doesn't support UDP operations.
  487. #
  488. # The latest IANA port assignments can be gotten from
  489. #
  490. # http://www.iana.org/assignments/port-numbers
  491. #
  492. # The Well Known Ports are those from 0 through 1023.
  493. # The Registered Ports are those from 1024 through 49151
  494. # The Dynamic and/or Private Ports are those from 49152 through 65535
  495. #
  496. # Kerberos services are for Kerberos v4, and are unofficial. Sites running
  497. # v5 should uncomment v5 entries and comment v4 entries.
  498. #
  499. # $FreeBSD: releng/11.1/etc/services 292694 2015-12-24 16:35:28Z jlh $
  500. # From: @(#)services 5.8 (Berkeley) 5/9/91
  501. #
  502. # WELL KNOWN PORT NUMBERS
  503. #
  504. rtmp 1/ddp #Routing Table Maintenance Protocol
  505. tcpmux 1/tcp #TCP Port Service Multiplexer
  506. tcpmux 1/udp #TCP Port Service Multiplexer
  507. nbp 2/ddp #Name Binding Protocol
  508. compressnet 2/tcp #Management Utility
  509. compressnet 2/udp #Management Utility
  510. compressnet 3/tcp #Compression Process
  511. compressnet 3/udp #Compression Process
  512. echo 4/ddp #AppleTalk Echo Protocol
  513. rje 5/tcp #Remote Job Entry
  514. rje 5/udp #Remote Job Entry
  515. zip 6/ddp #Zone Information Protocol
  516. echo 7/sctp
  517. echo 7/tcp
  518. echo 7/udp
  519. discard 9/sctp sink null
  520. discard 9/tcp sink null
  521. discard 9/udp sink null
  522. systat 11/tcp users #Active Users
  523. systat 11/udp users #Active Users
  524. daytime 13/sctp
  525. daytime 13/tcp
  526. daytime 13/udp
  527. qotd 17/tcp quote #Quote of the Day
  528. qotd 17/udp quote #Quote of the Day
  529. msp 18/tcp #Message Send Protocol
  530. msp 18/udp #Message Send Protocol
  531. chargen 19/sctp ttytst source #Character Generator
  532. chargen 19/tcp ttytst source #Character Generator
  533. chargen 19/udp ttytst source #Character Generator
  534. ftp-data 20/sctp #File Transfer [Default Data]
  535. ftp-data 20/tcp #File Transfer [Default Data]
  536. ftp-data 20/udp #File Transfer [Default Data]
  537. ftp 21/sctp #File Transfer [Control]
  538. ftp 21/tcp #File Transfer [Control]
  539. ftp 21/udp #File Transfer [Control]
  540. ssh 22/sctp #Secure Shell Login
  541. ssh 22/tcp #Secure Shell Login
  542. ssh 22/udp #Secure Shell Login
  543. telnet 23/tcp
  544. telnet 23/udp
  545. # 24/tcp any private mail system
  546. # 24/udp any private mail system
  547. smtp 25/tcp mail #Simple Mail Transfer
  548. smtp 25/udp mail #Simple Mail Transfer
  549. nsw-fe 27/tcp #NSW User System FE
  550. nsw-fe 27/udp #NSW User System FE
  551. msg-icp 29/tcp #MSG ICP
  552. msg-icp 29/udp #MSG ICP
  553. msg-auth 31/tcp #MSG Authentication
  554. msg-auth 31/udp #MSG Authentication
  555. dsp 33/tcp #Display Support Protocol
  556. dsp 33/udp #Display Support Protocol
  557. # 35/tcp any private printer server
  558. # 35/udp any private printer server
  559. time 37/tcp timserver
  560. time 37/udp timserver
  561. rap 38/tcp #Route Access Protocol
  562. rap 38/udp #Route Access Protocol
  563. rlp 39/tcp resource #Resource Location Protocol
  564. rlp 39/udp resource #Resource Location Protocol
  565. graphics 41/tcp
  566. graphics 41/udp
  567. nameserver 42/tcp name #Host Name Server
  568. nameserver 42/udp name #Host Name Server
  569. nicname 43/tcp whois
  570. nicname 43/udp whois
  571. mpm-flags 44/tcp #MPM FLAGS Protocol
  572. mpm-flags 44/udp #MPM FLAGS Protocol
  573. mpm 45/tcp #Message Processing Module [recv]
  574. mpm 45/udp #Message Processing Module [recv]
  575. mpm-snd 46/tcp #MPM [default send]
  576. mpm-snd 46/udp #MPM [default send]
  577. ni-ftp 47/tcp #NI FTP
  578. ni-ftp 47/udp #NI FTP
  579. auditd 48/tcp #Digital Audit Daemon
  580. auditd 48/udp #Digital Audit Daemon
  581. tacacs 49/tcp #Login Host Protocol (TACACS)
  582. tacacs 49/udp #Login Host Protocol (TACACS)
  583. re-mail-ck 50/tcp #Remote Mail Checking Protocol
  584. re-mail-ck 50/udp #Remote Mail Checking Protocol
  585. la-maint 51/tcp #IMP Logical Address Maintenance
  586. la-maint 51/udp #IMP Logical Address Maintenance
  587. xns-time 52/tcp #XNS Time Protocol
  588. xns-time 52/udp #XNS Time Protocol
  589. domain 5"
  590. 36595 syslogd RET read 32768/0x8000
  591. 36595 syslogd CALL close(0x6)
  592. 36595 syslogd RET close 0
  593. 36595 syslogd CALL socket(PF_INET6,0x10000002<SOCK_DGRAM|SOCK_CLOEXEC>,IPPROTO_IP)
  594. 36595 syslogd RET socket 6
  595. 36595 syslogd CALL close(0x6)
  596. 36595 syslogd RET close 0
  597. 36595 syslogd CALL stat(0x800baaf9c,0x7fffffffd630)
  598. 36595 syslogd NAMI "/etc/nsswitch.conf"
  599. 36595 syslogd STRU struct stat {dev=72, ino=10915312, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810440, atime=1513366167.744115000, mtime=1513366167.744226000, ctime=1513366167.744303000, birthtime=1513366167.744113000, size=338, blksize=32768, blocks=8, flags=0x0 }
  600. 36595 syslogd RET stat 0
  601. 36595 syslogd CALL open(0x800ba8233,0x100000<O_RDONLY|O_CLOEXEC>)
  602. 36595 syslogd NAMI "/etc/services"
  603. 36595 syslogd RET open 6
  604. 36595 syslogd CALL fstat(0x6,0x7fffffffd268)
  605. 36595 syslogd STRU struct stat {dev=72, ino=10915578, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810760, atime=1513366169.485528000, mtime=1513366169.485769000, ctime=1513366169.485863000, birthtime=1513366169.485525000, size=86246, blksize=32768, blocks=176, flags=0x0 }
  606. 36595 syslogd RET fstat 0
  607. 36595 syslogd CALL lseek(0x6,0,SEEK_CUR)
  608. 36595 syslogd RET lseek 0
  609. 36595 syslogd CALL lseek(0x6,0,SEEK_SET)
  610. 36595 syslogd RET lseek 0
  611. 36595 syslogd CALL read(0x6,0x80103c640,0x8000)
  612. 36595 syslogd GIO fd 6 read 4096 bytes
  613. "#
  614. # Network services, Internet style
  615. #
  616. # Note that it is presently the policy of IANA to assign a single well-known
  617. # port number for both TCP and UDP; hence, most entries here have two entries
  618. # even if the protocol doesn't support UDP operations.
  619. #
  620. # The latest IANA port assignments can be gotten from
  621. #
  622. # http://www.iana.org/assignments/port-numbers
  623. #
  624. # The Well Known Ports are those from 0 through 1023.
  625. # The Registered Ports are those from 1024 through 49151
  626. # The Dynamic and/or Private Ports are those from 49152 through 65535
  627. #
  628. # Kerberos services are for Kerberos v4, and are unofficial. Sites running
  629. # v5 should uncomment v5 entries and comment v4 entries.
  630. #
  631. # $FreeBSD: releng/11.1/etc/services 292694 2015-12-24 16:35:28Z jlh $
  632. # From: @(#)services 5.8 (Berkeley) 5/9/91
  633. #
  634. # WELL KNOWN PORT NUMBERS
  635. #
  636. rtmp 1/ddp #Routing Table Maintenance Protocol
  637. tcpmux 1/tcp #TCP Port Service Multiplexer
  638. tcpmux 1/udp #TCP Port Service Multiplexer
  639. nbp 2/ddp #Name Binding Protocol
  640. compressnet 2/tcp #Management Utility
  641. compressnet 2/udp #Management Utility
  642. compressnet 3/tcp #Compression Process
  643. compressnet 3/udp #Compression Process
  644. echo 4/ddp #AppleTalk Echo Protocol
  645. rje 5/tcp #Remote Job Entry
  646. rje 5/udp #Remote Job Entry
  647. zip 6/ddp #Zone Information Protocol
  648. echo 7/sctp
  649. echo 7/tcp
  650. echo 7/udp
  651. discard 9/sctp sink null
  652. discard 9/tcp sink null
  653. discard 9/udp sink null
  654. systat 11/tcp users #Active Users
  655. systat 11/udp users #Active Users
  656. daytime 13/sctp
  657. daytime 13/tcp
  658. daytime 13/udp
  659. qotd 17/tcp quote #Quote of the Day
  660. qotd 17/udp quote #Quote of the Day
  661. msp 18/tcp #Message Send Protocol
  662. msp 18/udp #Message Send Protocol
  663. chargen 19/sctp ttytst source #Character Generator
  664. chargen 19/tcp ttytst source #Character Generator
  665. chargen 19/udp ttytst source #Character Generator
  666. ftp-data 20/sctp #File Transfer [Default Data]
  667. ftp-data 20/tcp #File Transfer [Default Data]
  668. ftp-data 20/udp #File Transfer [Default Data]
  669. ftp 21/sctp #File Transfer [Control]
  670. ftp 21/tcp #File Transfer [Control]
  671. ftp 21/udp #File Transfer [Control]
  672. ssh 22/sctp #Secure Shell Login
  673. ssh 22/tcp #Secure Shell Login
  674. ssh 22/udp #Secure Shell Login
  675. telnet 23/tcp
  676. telnet 23/udp
  677. # 24/tcp any private mail system
  678. # 24/udp any private mail system
  679. smtp 25/tcp mail #Simple Mail Transfer
  680. smtp 25/udp mail #Simple Mail Transfer
  681. nsw-fe 27/tcp #NSW User System FE
  682. nsw-fe 27/udp #NSW User System FE
  683. msg-icp 29/tcp #MSG ICP
  684. msg-icp 29/udp #MSG ICP
  685. msg-auth 31/tcp #MSG Authentication
  686. msg-auth 31/udp #MSG Authentication
  687. dsp 33/tcp #Display Support Protocol
  688. dsp 33/udp #Display Support Protocol
  689. # 35/tcp any private printer server
  690. # 35/udp any private printer server
  691. time 37/tcp timserver
  692. time 37/udp timserver
  693. rap 38/tcp #Route Access Protocol
  694. rap 38/udp #Route Access Protocol
  695. rlp 39/tcp resource #Resource Location Protocol
  696. rlp 39/udp resource #Resource Location Protocol
  697. graphics 41/tcp
  698. graphics 41/udp
  699. nameserver 42/tcp name #Host Name Server
  700. nameserver 42/udp name #Host Name Server
  701. nicname 43/tcp whois
  702. nicname 43/udp whois
  703. mpm-flags 44/tcp #MPM FLAGS Protocol
  704. mpm-flags 44/udp #MPM FLAGS Protocol
  705. mpm 45/tcp #Message Processing Module [recv]
  706. mpm 45/udp #Message Processing Module [recv]
  707. mpm-snd 46/tcp #MPM [default send]
  708. mpm-snd 46/udp #MPM [default send]
  709. ni-ftp 47/tcp #NI FTP
  710. ni-ftp 47/udp #NI FTP
  711. auditd 48/tcp #Digital Audit Daemon
  712. auditd 48/udp #Digital Audit Daemon
  713. tacacs 49/tcp #Login Host Protocol (TACACS)
  714. tacacs 49/udp #Login Host Protocol (TACACS)
  715. re-mail-ck 50/tcp #Remote Mail Checking Protocol
  716. re-mail-ck 50/udp #Remote Mail Checking Protocol
  717. la-maint 51/tcp #IMP Logical Address Maintenance
  718. la-maint 51/udp #IMP Logical Address Maintenance
  719. xns-time 52/tcp #XNS Time Protocol
  720. xns-time 52/udp #XNS Time Protocol
  721. domain 5"
  722. 36595 syslogd RET read 32768/0x8000
  723. 36595 syslogd CALL close(0x6)
  724. 36595 syslogd RET close 0
  725. 36595 syslogd CALL socket(PF_INET,0x10000002<SOCK_DGRAM|SOCK_CLOEXEC>,IPPROTO_IP)
  726. 36595 syslogd RET socket 6
  727. 36595 syslogd CALL close(0x6)
  728. 36595 syslogd RET close 0
  729. 36595 syslogd CALL stat(0x800baaf9c,0x7fffffffd630)
  730. 36595 syslogd NAMI "/etc/nsswitch.conf"
  731. 36595 syslogd STRU struct stat {dev=72, ino=10915312, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810440, atime=1513366167.744115000, mtime=1513366167.744226000, ctime=1513366167.744303000, birthtime=1513366167.744113000, size=338, blksize=32768, blocks=8, flags=0x0 }
  732. 36595 syslogd RET stat 0
  733. 36595 syslogd CALL open(0x800ba8233,0x100000<O_RDONLY|O_CLOEXEC>)
  734. 36595 syslogd NAMI "/etc/services"
  735. 36595 syslogd RET open 6
  736. 36595 syslogd CALL fstat(0x6,0x7fffffffd268)
  737. 36595 syslogd STRU struct stat {dev=72, ino=10915578, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810760, atime=1513366169.485528000, mtime=1513366169.485769000, ctime=1513366169.485863000, birthtime=1513366169.485525000, size=86246, blksize=32768, blocks=176, flags=0x0 }
  738. 36595 syslogd RET fstat 0
  739. 36595 syslogd CALL lseek(0x6,0,SEEK_CUR)
  740. 36595 syslogd RET lseek 0
  741. 36595 syslogd CALL lseek(0x6,0,SEEK_SET)
  742. 36595 syslogd RET lseek 0
  743. 36595 syslogd CALL read(0x6,0x80103c640,0x8000)
  744. 36595 syslogd GIO fd 6 read 4096 bytes
  745. "#
  746. # Network services, Internet style
  747. #
  748. # Note that it is presently the policy of IANA to assign a single well-known
  749. # port number for both TCP and UDP; hence, most entries here have two entries
  750. # even if the protocol doesn't support UDP operations.
  751. #
  752. # The latest IANA port assignments can be gotten from
  753. #
  754. # http://www.iana.org/assignments/port-numbers
  755. #
  756. # The Well Known Ports are those from 0 through 1023.
  757. # The Registered Ports are those from 1024 through 49151
  758. # The Dynamic and/or Private Ports are those from 49152 through 65535
  759. #
  760. # Kerberos services are for Kerberos v4, and are unofficial. Sites running
  761. # v5 should uncomment v5 entries and comment v4 entries.
  762. #
  763. # $FreeBSD: releng/11.1/etc/services 292694 2015-12-24 16:35:28Z jlh $
  764. # From: @(#)services 5.8 (Berkeley) 5/9/91
  765. #
  766. # WELL KNOWN PORT NUMBERS
  767. #
  768. rtmp 1/ddp #Routing Table Maintenance Protocol
  769. tcpmux 1/tcp #TCP Port Service Multiplexer
  770. tcpmux 1/udp #TCP Port Service Multiplexer
  771. nbp 2/ddp #Name Binding Protocol
  772. compressnet 2/tcp #Management Utility
  773. compressnet 2/udp #Management Utility
  774. compressnet 3/tcp #Compression Process
  775. compressnet 3/udp #Compression Process
  776. echo 4/ddp #AppleTalk Echo Protocol
  777. rje 5/tcp #Remote Job Entry
  778. rje 5/udp #Remote Job Entry
  779. zip 6/ddp #Zone Information Protocol
  780. echo 7/sctp
  781. echo 7/tcp
  782. echo 7/udp
  783. discard 9/sctp sink null
  784. discard 9/tcp sink null
  785. discard 9/udp sink null
  786. systat 11/tcp users #Active Users
  787. systat 11/udp users #Active Users
  788. daytime 13/sctp
  789. daytime 13/tcp
  790. daytime 13/udp
  791. qotd 17/tcp quote #Quote of the Day
  792. qotd 17/udp quote #Quote of the Day
  793. msp 18/tcp #Message Send Protocol
  794. msp 18/udp #Message Send Protocol
  795. chargen 19/sctp ttytst source #Character Generator
  796. chargen 19/tcp ttytst source #Character Generator
  797. chargen 19/udp ttytst source #Character Generator
  798. ftp-data 20/sctp #File Transfer [Default Data]
  799. ftp-data 20/tcp #File Transfer [Default Data]
  800. ftp-data 20/udp #File Transfer [Default Data]
  801. ftp 21/sctp #File Transfer [Control]
  802. ftp 21/tcp #File Transfer [Control]
  803. ftp 21/udp #File Transfer [Control]
  804. ssh 22/sctp #Secure Shell Login
  805. ssh 22/tcp #Secure Shell Login
  806. ssh 22/udp #Secure Shell Login
  807. telnet 23/tcp
  808. telnet 23/udp
  809. # 24/tcp any private mail system
  810. # 24/udp any private mail system
  811. smtp 25/tcp mail #Simple Mail Transfer
  812. smtp 25/udp mail #Simple Mail Transfer
  813. nsw-fe 27/tcp #NSW User System FE
  814. nsw-fe 27/udp #NSW User System FE
  815. msg-icp 29/tcp #MSG ICP
  816. msg-icp 29/udp #MSG ICP
  817. msg-auth 31/tcp #MSG Authentication
  818. msg-auth 31/udp #MSG Authentication
  819. dsp 33/tcp #Display Support Protocol
  820. dsp 33/udp #Display Support Protocol
  821. # 35/tcp any private printer server
  822. # 35/udp any private printer server
  823. time 37/tcp timserver
  824. time 37/udp timserver
  825. rap 38/tcp #Route Access Protocol
  826. rap 38/udp #Route Access Protocol
  827. rlp 39/tcp resource #Resource Location Protocol
  828. rlp 39/udp resource #Resource Location Protocol
  829. graphics 41/tcp
  830. graphics 41/udp
  831. nameserver 42/tcp name #Host Name Server
  832. nameserver 42/udp name #Host Name Server
  833. nicname 43/tcp whois
  834. nicname 43/udp whois
  835. mpm-flags 44/tcp #MPM FLAGS Protocol
  836. mpm-flags 44/udp #MPM FLAGS Protocol
  837. mpm 45/tcp #Message Processing Module [recv]
  838. mpm 45/udp #Message Processing Module [recv]
  839. mpm-snd 46/tcp #MPM [default send]
  840. mpm-snd 46/udp #MPM [default send]
  841. ni-ftp 47/tcp #NI FTP
  842. ni-ftp 47/udp #NI FTP
  843. auditd 48/tcp #Digital Audit Daemon
  844. auditd 48/udp #Digital Audit Daemon
  845. tacacs 49/tcp #Login Host Protocol (TACACS)
  846. tacacs 49/udp #Login Host Protocol (TACACS)
  847. re-mail-ck 50/tcp #Remote Mail Checking Protocol
  848. re-mail-ck 50/udp #Remote Mail Checking Protocol
  849. la-maint 51/tcp #IMP Logical Address Maintenance
  850. la-maint 51/udp #IMP Logical Address Maintenance
  851. xns-time 52/tcp #XNS Time Protocol
  852. xns-time 52/udp #XNS Time Protocol
  853. domain 5"
  854. 36595 syslogd RET read 32768/0x8000
  855. 36595 syslogd CALL close(0x6)
  856. 36595 syslogd RET close 0
  857. 36595 syslogd CALL stat(0x800baaf9c,0x7fffffffd630)
  858. 36595 syslogd NAMI "/etc/nsswitch.conf"
  859. 36595 syslogd STRU struct stat {dev=72, ino=10915312, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810440, atime=1513366167.744115000, mtime=1513366167.744226000, ctime=1513366167.744303000, birthtime=1513366167.744113000, size=338, blksize=32768, blocks=8, flags=0x0 }
  860. 36595 syslogd RET stat 0
  861. 36595 syslogd CALL open(0x800ba8233,0x100000<O_RDONLY|O_CLOEXEC>)
  862. 36595 syslogd NAMI "/etc/services"
  863. 36595 syslogd RET open 6
  864. 36595 syslogd CALL fstat(0x6,0x7fffffffd268)
  865. 36595 syslogd STRU struct stat {dev=72, ino=10915578, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810760, atime=1513366169.485528000, mtime=1513366169.485769000, ctime=1513366169.485863000, birthtime=1513366169.485525000, size=86246, blksize=32768, blocks=176, flags=0x0 }
  866. 36595 syslogd RET fstat 0
  867. 36595 syslogd CALL lseek(0x6,0,SEEK_CUR)
  868. 36595 syslogd RET lseek 0
  869. 36595 syslogd CALL lseek(0x6,0,SEEK_SET)
  870. 36595 syslogd RET lseek 0
  871. 36595 syslogd CALL read(0x6,0x80103c640,0x8000)
  872. 36595 syslogd GIO fd 6 read 4096 bytes
  873. "#
  874. # Network services, Internet style
  875. #
  876. # Note that it is presently the policy of IANA to assign a single well-known
  877. # port number for both TCP and UDP; hence, most entries here have two entries
  878. # even if the protocol doesn't support UDP operations.
  879. #
  880. # The latest IANA port assignments can be gotten from
  881. #
  882. # http://www.iana.org/assignments/port-numbers
  883. #
  884. # The Well Known Ports are those from 0 through 1023.
  885. # The Registered Ports are those from 1024 through 49151
  886. # The Dynamic and/or Private Ports are those from 49152 through 65535
  887. #
  888. # Kerberos services are for Kerberos v4, and are unofficial. Sites running
  889. # v5 should uncomment v5 entries and comment v4 entries.
  890. #
  891. # $FreeBSD: releng/11.1/etc/services 292694 2015-12-24 16:35:28Z jlh $
  892. # From: @(#)services 5.8 (Berkeley) 5/9/91
  893. #
  894. # WELL KNOWN PORT NUMBERS
  895. #
  896. rtmp 1/ddp #Routing Table Maintenance Protocol
  897. tcpmux 1/tcp #TCP Port Service Multiplexer
  898. tcpmux 1/udp #TCP Port Service Multiplexer
  899. nbp 2/ddp #Name Binding Protocol
  900. compressnet 2/tcp #Management Utility
  901. compressnet 2/udp #Management Utility
  902. compressnet 3/tcp #Compression Process
  903. compressnet 3/udp #Compression Process
  904. echo 4/ddp #AppleTalk Echo Protocol
  905. rje 5/tcp #Remote Job Entry
  906. rje 5/udp #Remote Job Entry
  907. zip 6/ddp #Zone Information Protocol
  908. echo 7/sctp
  909. echo 7/tcp
  910. echo 7/udp
  911. discard 9/sctp sink null
  912. discard 9/tcp sink null
  913. discard 9/udp sink null
  914. systat 11/tcp users #Active Users
  915. systat 11/udp users #Active Users
  916. daytime 13/sctp
  917. daytime 13/tcp
  918. daytime 13/udp
  919. qotd 17/tcp quote #Quote of the Day
  920. qotd 17/udp quote #Quote of the Day
  921. msp 18/tcp #Message Send Protocol
  922. msp 18/udp #Message Send Protocol
  923. chargen 19/sctp ttytst source #Character Generator
  924. chargen 19/tcp ttytst source #Character Generator
  925. chargen 19/udp ttytst source #Character Generator
  926. ftp-data 20/sctp #File Transfer [Default Data]
  927. ftp-data 20/tcp #File Transfer [Default Data]
  928. ftp-data 20/udp #File Transfer [Default Data]
  929. ftp 21/sctp #File Transfer [Control]
  930. ftp 21/tcp #File Transfer [Control]
  931. ftp 21/udp #File Transfer [Control]
  932. ssh 22/sctp #Secure Shell Login
  933. ssh 22/tcp #Secure Shell Login
  934. ssh 22/udp #Secure Shell Login
  935. telnet 23/tcp
  936. telnet 23/udp
  937. # 24/tcp any private mail system
  938. # 24/udp any private mail system
  939. smtp 25/tcp mail #Simple Mail Transfer
  940. smtp 25/udp mail #Simple Mail Transfer
  941. nsw-fe 27/tcp #NSW User System FE
  942. nsw-fe 27/udp #NSW User System FE
  943. msg-icp 29/tcp #MSG ICP
  944. msg-icp 29/udp #MSG ICP
  945. msg-auth 31/tcp #MSG Authentication
  946. msg-auth 31/udp #MSG Authentication
  947. dsp 33/tcp #Display Support Protocol
  948. dsp 33/udp #Display Support Protocol
  949. # 35/tcp any private printer server
  950. # 35/udp any private printer server
  951. time 37/tcp timserver
  952. time 37/udp timserver
  953. rap 38/tcp #Route Access Protocol
  954. rap 38/udp #Route Access Protocol
  955. rlp 39/tcp resource #Resource Location Protocol
  956. rlp 39/udp resource #Resource Location Protocol
  957. graphics 41/tcp
  958. graphics 41/udp
  959. nameserver 42/tcp name #Host Name Server
  960. nameserver 42/udp name #Host Name Server
  961. nicname 43/tcp whois
  962. nicname 43/udp whois
  963. mpm-flags 44/tcp #MPM FLAGS Protocol
  964. mpm-flags 44/udp #MPM FLAGS Protocol
  965. mpm 45/tcp #Message Processing Module [recv]
  966. mpm 45/udp #Message Processing Module [recv]
  967. mpm-snd 46/tcp #MPM [default send]
  968. mpm-snd 46/udp #MPM [default send]
  969. ni-ftp 47/tcp #NI FTP
  970. ni-ftp 47/udp #NI FTP
  971. auditd 48/tcp #Digital Audit Daemon
  972. auditd 48/udp #Digital Audit Daemon
  973. tacacs 49/tcp #Login Host Protocol (TACACS)
  974. tacacs 49/udp #Login Host Protocol (TACACS)
  975. re-mail-ck 50/tcp #Remote Mail Checking Protocol
  976. re-mail-ck 50/udp #Remote Mail Checking Protocol
  977. la-maint 51/tcp #IMP Logical Address Maintenance
  978. la-maint 51/udp #IMP Logical Address Maintenance
  979. xns-time 52/tcp #XNS Time Protocol
  980. xns-time 52/udp #XNS Time Protocol
  981. domain 5"
  982. 36595 syslogd RET read 32768/0x8000
  983. 36595 syslogd CALL close(0x6)
  984. 36595 syslogd RET close 0
  985. 36595 syslogd CALL stat(0x800baaf9c,0x7fffffffd630)
  986. 36595 syslogd NAMI "/etc/nsswitch.conf"
  987. 36595 syslogd STRU struct stat {dev=72, ino=10915312, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810440, atime=1513366167.744115000, mtime=1513366167.744226000, ctime=1513366167.744303000, birthtime=1513366167.744113000, size=338, blksize=32768, blocks=8, flags=0x0 }
  988. 36595 syslogd RET stat 0
  989. 36595 syslogd CALL open(0x800ba8233,0x100000<O_RDONLY|O_CLOEXEC>)
  990. 36595 syslogd NAMI "/etc/services"
  991. 36595 syslogd RET open 6
  992. 36595 syslogd CALL fstat(0x6,0x7fffffffd268)
  993. 36595 syslogd STRU struct stat {dev=72, ino=10915578, mode=0100644, nlink=1, uid=0, gid=0, rdev=21810760, atime=1513366169.485528000, mtime=1513366169.485769000, ctime=1513366169.485863000, birthtime=1513366169.485525000, size=86246, blksize=32768, blocks=176, flags=0x0 }
  994. 36595 syslogd RET fstat 0
  995. 36595 syslogd CALL lseek(0x6,0,SEEK_CUR)
  996. 36595 syslogd RET lseek 0
  997. 36595 syslogd CALL lseek(0x6,0,SEEK_SET)
  998. 36595 syslogd RET lseek 0
  999. 36595 syslogd CALL read(0x6,0x80103c640,0x8000)
  1000. 36595 syslogd GIO fd 6 read 4096 bytes
  1001. "#
  1002. # Network services, Internet style
  1003. #
  1004. # Note that it is presently the policy of IANA to assign a single well-known
  1005. # port number for both TCP and UDP; hence, most entries here have two entries
  1006. # even if the protocol doesn't support UDP operations.
  1007. #
  1008. # The latest IANA port assignments can be gotten from
  1009. #
  1010. # http://www.iana.org/assignments/port-numbers
  1011. #
  1012. # The Well Known Ports are those from 0 through 1023.
  1013. # The Registered Ports are those from 1024 through 49151
  1014. # The Dynamic and/or Private Ports are those from 49152 through 65535
  1015. #
  1016. # Kerberos services are for Kerberos v4, and are unofficial. Sites running
  1017. # v5 should uncomment v5 entries and comment v4 entries.
  1018. #
  1019. # $FreeBSD: releng/11.1/etc/services 292694 2015-12-24 16:35:28Z jlh $
  1020. # From: @(#)services 5.8 (Berkeley) 5/9/91
  1021. #
  1022. # WELL KNOWN PORT NUMBERS
  1023. #
  1024. rtmp 1/ddp #Routing Table Maintenance Protocol
  1025. tcpmux 1/tcp #TCP Port Service Multiplexer
  1026. tcpmux 1/udp #TCP Port Service Multiplexer
  1027. nbp 2/ddp #Name Binding Protocol
  1028. compressnet 2/tcp #Management Utility
  1029. compressnet 2/udp #Management Utility
  1030. compressnet 3/tcp #Compression Process
  1031. compressnet 3/udp #Compression Process
  1032. echo 4/ddp #AppleTalk Echo Protocol
  1033. rje 5/tcp #Remote Job Entry
  1034. rje 5/udp #Remote Job Entry
  1035. zip 6/ddp #Zone Information Protocol
  1036. echo 7/sctp
  1037. echo 7/tcp
  1038. echo 7/udp
  1039. discard 9/sctp sink null
  1040. discard 9/tcp sink null
  1041. discard 9/udp sink null
  1042. systat 11/tcp users #Active Users
  1043. systat 11/udp users #Active Users
  1044. daytime 13/sctp
  1045. daytime 13/tcp
  1046. daytime 13/udp
  1047. qotd 17/tcp quote #Quote of the Day
  1048. qotd 17/udp quote #Quote of the Day
  1049. msp 18/tcp #Message Send Protocol
  1050. msp 18/udp #Message Send Protocol
  1051. chargen 19/sctp ttytst source #Character Generator
  1052. chargen 19/tcp ttytst source #Character Generator
  1053. chargen 19/udp ttytst source #Character Generator
  1054. ftp-data 20/sctp #File Transfer [Default Data]
  1055. ftp-data 20/tcp #File Transfer [Default Data]
  1056. ftp-data 20/udp #File Transfer [Default Data]
  1057. ftp 21/sctp #File Transfer [Control]
  1058. ftp 21/tcp #File Transfer [Control]
  1059. ftp 21/udp #File Transfer [Control]
  1060. ssh 22/sctp #Secure Shell Login
  1061. ssh 22/tcp #Secure Shell Login
  1062. ssh 22/udp #Secure Shell Login
  1063. telnet 23/tcp
  1064. telnet 23/udp
  1065. # 24/tcp any private mail system
  1066. # 24/udp any private mail system
  1067. smtp 25/tcp mail #Simple Mail Transfer
  1068. smtp 25/udp mail #Simple Mail Transfer
  1069. nsw-fe 27/tcp #NSW User System FE
  1070. nsw-fe 27/udp #NSW User System FE
  1071. msg-icp 29/tcp #MSG ICP
  1072. msg-icp 29/udp #MSG ICP
  1073. msg-auth 31/tcp #MSG Authentication
  1074. msg-auth 31/udp #MSG Authentication
  1075. dsp 33/tcp #Display Support Protocol
  1076. dsp 33/udp #Display Support Protocol
  1077. # 35/tcp any private printer server
  1078. # 35/udp any private printer server
  1079. time 37/tcp timserver
  1080. time 37/udp timserver
  1081. rap 38/tcp #Route Access Protocol
  1082. rap 38/udp #Route Access Protocol
  1083. rlp 39/tcp resource #Resource Location Protocol
  1084. rlp 39/udp resource #Resource Location Protocol
  1085. graphics 41/tcp
  1086. graphics 41/udp
  1087. nameserver 42/tcp name #Host Name Server
  1088. nameserver 42/udp name #Host Name Server
  1089. nicname 43/tcp whois
  1090. nicname 43/udp whois
  1091. mpm-flags 44/tcp #MPM FLAGS Protocol
  1092. mpm-flags 44/udp #MPM FLAGS Protocol
  1093. mpm 45/tcp #Message Processing Module [recv]
  1094. mpm 45/udp #Message Processing Module [recv]
  1095. mpm-snd 46/tcp #MPM [default send]
  1096. mpm-snd 46/udp #MPM [default send]
  1097. ni-ftp 47/tcp #NI FTP
  1098. ni-ftp 47/udp #NI FTP
  1099. auditd 48/tcp #Digital Audit Daemon
  1100. auditd 48/udp #Digital Audit Daemon
  1101. tacacs 49/tcp #Login Host Protocol (TACACS)
  1102. tacacs 49/udp #Login Host Protocol (TACACS)
  1103. re-mail-ck 50/tcp #Remote Mail Checking Protocol
  1104. re-mail-ck 50/udp #Remote Mail Checking Protocol
  1105. la-maint 51/tcp #IMP Logical Address Maintenance
  1106. la-maint 51/udp #IMP Logical Address Maintenance
  1107. xns-time 52/tcp #XNS Time Protocol
  1108. xns-time 52/udp #XNS Time Protocol
  1109. domain 5"
  1110. 36595 syslogd RET read 32768/0x8000
  1111. 36595 syslogd CALL close(0x6)
  1112. 36595 syslogd RET close 0
  1113. 36595 syslogd CALL socket(PF_INET6,0x2<SOCK_DGRAM>,IPPROTO_UDP)
  1114. 36595 syslogd RET socket 6
  1115. 36595 syslogd CALL setsockopt(0x6,IPPROTO_IPV6,IPV6_V6ONLY,0x7fffffffdb64,0x4)
  1116. 36595 syslogd RET setsockopt 0
  1117. 36595 syslogd CALL setsockopt(0x6,SOL_SOCKET,SO_REUSEADDR,0x7fffffffdb64,0x4)
  1118. 36595 syslogd RET setsockopt 0
  1119. 36595 syslogd CALL bind(0x6,0x8010370d0,0x1c)
  1120. 36595 syslogd STRU struct sockaddr { AF_INET6, [::]:514 }
  1121. 36595 syslogd RET bind 0
  1122. 36595 syslogd CALL write(0x1,0x80101b000,0x1e)
  1123. 36595 syslogd GIO fd 1 wrote 30 bytes
  1124. "socksetup: new socket fd is 6
  1125. "
  1126. 36595 syslogd RET write 30/0x1e
  1127. 36595 syslogd CALL socket(PF_INET,0x2<SOCK_DGRAM>,IPPROTO_UDP)
  1128. 36595 syslogd RET socket 7
  1129. 36595 syslogd CALL setsockopt(0x7,SOL_SOCKET,SO_REUSEADDR,0x7fffffffdb64,0x4)
  1130. 36595 syslogd RET setsockopt 0
  1131. 36595 syslogd CALL bind(0x7,0x801052070,0x10)
  1132. 36595 syslogd STRU struct sockaddr { AF_INET, 0.0.0.0:514 }
  1133. 36595 syslogd RET bind 0
  1134. 36595 syslogd CALL write(0x1,0x80101b000,0x1e)
  1135. 36595 syslogd GIO fd 1 wrote 30 bytes
  1136. "socksetup: new socket fd is 7
  1137. "
  1138. 36595 syslogd RET write 30/0x1e
  1139. 36595 syslogd CALL shutdown(0x6,SHUT_RD)
  1140. 36595 syslogd RET shutdown -1 errno 57 Socket is not connected
  1141. 36595 syslogd CALL shutdown(0x7,SHUT_RD)
  1142. 36595 syslogd RET shutdown -1 errno 57 Socket is not connected
  1143. 36595 syslogd CALL write(0x1,0x80101b000,0x24)
  1144. 36595 syslogd GIO fd 1 wrote 36 bytes
  1145. "sending on inet and/or inet6 socket
  1146. "
  1147. 36595 syslogd RET write 36/0x24
  1148. 36595 syslogd CALL openat(AT_FDCWD,0x408dac,0x4<O_RDONLY|O_NONBLOCK>)
  1149. 36595 syslogd NAMI "/dev/klog"
  1150. 36595 syslogd RET openat 8
  1151. 36595 syslogd CALL fstat(0x3,0x7fffffffdb30)
  1152. 36595 syslogd STRU struct stat {dev=101, ino=4975875, mode=0100600, nlink=1, uid=0, gid=0, rdev=0, atime=1513434223.679455000, mtime=1513434223.679557000, ctime=1513434223.679557000, birthtime=1513434223.679452000, size=0, blksize=32768, blocks=0, flags=0x0 }
  1153. 36595 syslogd RET fstat 0
  1154. 36595 syslogd CALL ftruncate(0x3,0)
  1155. 36595 syslogd RET ftruncate 0
  1156. 36595 syslogd CALL getpid
  1157. 36595 syslogd RET getpid 36595/0x8ef3
  1158. 36595 syslogd CALL pwrite(0x3,0x7fffffffdb30,0x5,0)
  1159. 36595 syslogd GIO fd 3 wrote 5 bytes
  1160. "36595"
  1161. 36595 syslogd RET pwrite 5
  1162. 36595 syslogd CALL write(0x1,0x80101b000,0x12)
  1163. 36595 syslogd GIO fd 1 wrote 18 bytes
  1164. "off & running....
  1165. "
  1166. 36595 syslogd RET write 18/0x12
  1167. 36595 syslogd CALL write(0x1,0x80101b000,0x5)
  1168. 36595 syslogd GIO fd 1 wrote 5 bytes
  1169. "init
  1170. "
  1171. 36595 syslogd RET write 5
  1172. 36595 syslogd CALL __sysctl(0x7fffffffd050,0x2,0x60c530,0x7fffffffd048,0,0)
  1173. 36595 syslogd SCTL "kern.hostname"
  1174. 36595 syslogd RET __sysctl 0
  1175. 36595 syslogd CALL write(0x1,0x80101b000,0x22)
  1176. 36595 syslogd GIO fd 1 wrote 34 bytes
  1177. "loading timezone data via tzset()
  1178. "
  1179. 36595 syslogd RET write 34/0x22
  1180. 36595 syslogd CALL issetugid
  1181. 36595 syslogd RET issetugid 0
  1182. 36595 syslogd CALL access(0x8010580e4,0x4<R_OK>)
  1183. 36595 syslogd NAMI "/etc/localtime"
  1184. 36595 syslogd RET access 0
  1185. 36595 syslogd CALL open(0x8010580e4,0<O_RDONLY>)
  1186. 36595 syslogd NAMI "/etc/localtime"
  1187. 36595 syslogd RET open 9
  1188. 36595 syslogd CALL fstat(0x9,0x7fffffffcf98)
  1189. 36595 syslogd STRU struct stat {dev=72, ino=10914872, mode=0100444, nlink=1, uid=0, gid=0, rdev=21810201, atime=1478378692.065713000, mtime=1478361152.008279000, ctime=1478361152.008279000, birthtime=1478361152.008214000, size=2246, blksize=32768, blocks=8, flags=0x0 }
  1190. 36595 syslogd RET fstat 0
  1191. 36595 syslogd CALL read(0x9,0x80105c080,0xa1e8)
  1192. 36595 syslogd GIO fd 9 read 2246 bytes
  1193. 0x0000 545a 6966 3200 0000 0000 0000 0000 0000 0000 0000 0000 0006 0000 0006 0000 0000 0000 008d 0000 0006 0000 |TZif2.....................................|
  1194. 0x002a 0009 9b0c 1760 9bd5 daf0 9cd9 ae90 9da4 b590 9eb9 9090 9f84 9790 c809 7190 cce7 4b10 cda9 1790 cea2 4310 |.....`......................q...K.......C.|
  1195. 0x0054 cf92 3410 d06e 5e90 d179 ff10 d2a1 4f10 d380 1c90 d449 d210 d54c 3810 d629 b410 d72c 1a10 d809 9610 d901 |..4..n^..y....O......I...L8..)...,........|
  1196. 0x007e 7010 d9e9 7810 10ed 6470 1164 2790 1254 1890 134d 4410 1433 fa90 1523 eb90 1613 dc90 1703 cd90 17f3 be90 |p...x...dp.d'..T...MD..3...#..............|
  1197. 0x00a8 18e3 af90 19d3 a090 1ac3 9190 1bbc bd10 1cac ae10 1d9c 9f10 1e8c 9010 1f7c 8110 206c 7210 215c 6310 224c |.............................|.. lr.!\c."L|
  1198. 0x00d2 5410 233c 4510 242c 3610 251c 2710 260c 1810 2705 4390 27f5 3490 28e5 2590 29d5 1690 2ac5 0790 2bb4 f890 |T.#<E.$,6.%.'.&...'.C.'.4.(.%.)...*...+...|
  1199. 0x00fc 2ca4 e990 2d94 da90 2e84 cb90 2f74 bc90 3064 ad90 315d d910 3272 b410 333d bb10 3452 9610 351d 9d10 3632 |,...-......./t..0d..1]..2r..3=..4R..5...62|
  1200. 0x0126 7810 36fd 7f10 381b 9490 38dd 6110 39fb 7690 3abd 4310 3bdb 5890 3ca6 5f90 3dbb 3a90 3e86 4190 3f9b 1c90 |x.6...8...8.a.9.v.:.C.;.X.<._.=.:.>.A.?...|
  1201. 0x0150 4066 2390 4184 3910 4246 0590 4364 1b10 4425 e790 4543 fd10 4605 c990 4723 df10 47ee e610 4903 c110 49ce |@f#.A.9.BF..Cd..D%..EC..F...G#..G...I...I.|
  1202. 0x017a c810 4ae3 a310 4bae aa10 4ccc bf90 4d8e 8c10 4eac a190 4f6e 6e10 508c 8390 5157 8a90 526c 6590 5337 6c90 |..J...K...L...M...N...Onn.P...QW..Rle.S7l.|
  1203. 0x01a4 544c 4790 5517 4e90 562c 2990 56f7 3090 5815 4610 58d7 1290 59f5 2810 5ab6 f490 5bd5 0a10 5ca0 1110 5db4 |TLG.U.N.V,).V.0.X.F.X...Y.(.Z...[...\...].|
  1204. 0x01ce ec10 5e7f f310 5f94 ce10 605f d510 617d ea90 623f b710 635d cc90 641f 9910 653d ae90 6608 b590 671d 9090 |..^..._...`_..a}..b?..c]..d...e=..f...g...|
  1205. 0x01f8 67e8 9790 68fd 7290 69c8 7990 6add 5490 6ba8 5b90 6cc6 7110 6d88 3d90 6ea6 5310 6f68 1f90 7086 3510 7151 |g...h.r.i.y.j.T.k.[.l.q.m.=.n.S.oh..p.5.qQ|
  1206. 0x0222 3c10 7266 1710 7331 1e10 7445 f910 7511 0010 762f 1590 76f0 e210 780e f790 78d0 c410 79ee d990 7ab0 a610 |<.rf..s1..tE..u...v/..v...x...x...y...z...|
  1207. 0x024c 7bce bb90 7c99 c290 7dae 9d90 7e79 a490 7f8e 7f90 0001 0203 0203 0203 0203 0203 0203 0203 0203 0203 0203 |{...|...}...~y............................|
  1208. 0x0276 0104 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 |..........................................|
  1209. 0x02a0 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 |..........................................|
  1210. 0x02ca 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0500 001c 2001 0000 |...................................... ...|
  1211. 0x02f4 000e 1000 0500 001c 2001 0000 000e 1000 0500 001c 2001 0000 000e 1000 0543 4553 5400 4345 5400 0000 0101 |........ ........... ........CEST.CET.....|
  1212. 0x031e 0101 0000 0000 0101 545a 6966 3200 0000 0000 0000 0000 0000 0000 0000 0000 0008 0000 0008 0000 0000 0000 |........TZif2.............................|
  1213. 0x0348 008f 0000 0008 0000 0011 ffff ffff 1e49 92f8 ffff ffff 6ccf eaf8 ffff ffff 9b0c 1760 ffff ffff 9bd5 daf0 |...............I......l..........`........|
  1214. 0x0372 ffff ffff 9cd9 ae90 ffff ffff 9da4 b590 ffff ffff 9eb9 9090 ffff ffff 9f84 9790 ffff ffff c809 7190 ffff |......................................q...|
  1215. 0x039c ffff cce7 4b10 ffff ffff cda9 1790 ffff ffff cea2 4310 ffff ffff cf92 3410 ffff ffff d06e 5e90 ffff ffff |....K...............C.......4......n^.....|
  1216. 0x03c6 d179 ff10 ffff ffff d2a1 4f10 ffff ffff d380 1c90 ffff ffff d449 d210 ffff ffff d54c 3810 ffff ffff d629 |.y........O..............I.......L8......)|
  1217. 0x03f0 b410 ffff ffff d72c 1a10 ffff ffff d809 9610 ffff ffff d901 7010 ffff ffff d9e9 7810 0000 0000 10ed 6470 |.......,................p.......x.......dp|
  1218. 0x041a 0000 0000 1164 2790 0000 0000 1254 1890 0000 0000 134d 4410 0000 0000 1433 fa90 0000 0000 1523 eb90 0000 |.....d'......T.......MD......3.......#....|
  1219. 0x0444 0000 1613 dc90 0000 0000 1703 cd90 0000 0000 17f3 be90 0000 0000 18e3 af90 0000 0000 19d3 a090 0000 0000 |..........................................|
  1220. 0x046e 1ac3 9190 0000 0000 1bbc bd10 0000 0000 1cac ae10 0000 0000 1d9c 9f10 0000 0000 1e8c 9010 0000 0000 1f7c |.........................................||
  1221. 0x0498 8110 0000 0000 206c 7210 0000 0000 215c 6310 0000 0000 224c 5410 0000 0000 233c 4510 0000 0000 242c 3610 |...... lr.....!\c....."LT.....#<E.....$,6.|
  1222. 0x04c2 0000 0000 251c 2710 0000 0000 260c 1810 0000 0000 2705 4390 0000 0000 27f5 3490 0000 0000 28e5 2590 0000 |....%.'.....&.......'.C.....'.4.....(.%...|
  1223. 0x04ec 0000 29d5 1690 0000 0000 2ac5 0790 0000 0000 2bb4 f890 0000 0000 2ca4 e990 0000 0000 2d94 da90 0000 0000 |..).......*.......+.......,.......-.......|
  1224. 0x0516 2e84 cb90 0000 0000 2f74 bc90 0000 0000 3064 ad90 0000 0000 315d d910 0000 0000 3272 b410 0000 0000 333d |......../t......0d......1]......2r......3=|
  1225. 0x0540 bb10 0000 0000 3452 9610 0000 0000 351d 9d10 0000 0000 3632 7810 0000 0000 36fd 7f10 0000 0000 381b 9490 |......4R......5.......62x.....6.......8...|
  1226. 0x056a 0000 0000 38dd 6110 0000 0000 39fb 7690 0000 0000 3abd 4310 0000 0000 3bdb 5890 0000 0000 3ca6 5f90 0000 |....8.a.....9.v.....:.C.....;.X.....<._...|
  1227. 0x0594 0000 3dbb 3a90 0000 0000 3e86 4190 0000 0000 3f9b 1c90 0000 0000 4066 2390 0000 0000 4184 3910 0000 0000 |..=.:.....>.A.....?.......@f#.....A.9.....|
  1228. 0x05be 4246 0590 0000 0000 4364 1b10 0000 0000 4425 e790 0000 0000 4543 fd10 0000 0000 4605 c990 0000 0000 4723 |BF......Cd......D%......EC......F.......G#|
  1229. 0x05e8 df10 0000 0000 47ee e610 0000 0000 4903 c110 0000 0000 49ce c810 0000 0000 4ae3 a310 0000 0000 4bae aa10 |......G.......I.......I.......J.......K...|
  1230. 0x0612 0000 0000 4ccc bf90 0000 0000 4d8e 8c10 0000 0000 4eac a190 0000 0000 4f6e 6e10 0000 0000 508c 8390 0000 |....L.......M.......N.......Onn.....P.....|
  1231. 0x063c 0000 5157 8a90 0000 0000 526c 6590 0000 0000 5337 6c90 0000 0000 544c 4790 0000 0000 5517 4e90 0000 0000 |..QW......Rle.....S7l.....TLG.....U.N.....|
  1232. 0x0666 562c 2990 0000 0000 56f7 3090 0000 0000 5815 4610 0000 0000 58d7 1290 0000 0000 59f5 2810 0000 0000 5ab6 |V,).....V.0.....X.F.....X.......Y.(.....Z.|
  1233. 0x0690 f490 0000 0000 5bd5 0a10 0000 0000 5ca0 1110 0000 0000 5db4 ec10 0000 0000 5e7f f310 0000 0000 5f94 ce10 |......[.......\.......].......^......._...|
  1234. 0x06ba 0000 0000 605f d510 0000 0000 617d ea90 0000 0000 623f b710 0000 0000 635d cc90 0000 0000 641f 9910 0000 |....`_......a}......b?......c]......d.....|
  1235. 0x06e4 0000 653d ae90 0000 0000 6608 b590 0000 0000 671d 9090 0000 0000 67e8 9790 0000 0000 68fd 7290 0000 0000 |..e=......f.......g.......g.......h.r.....|
  1236. 0x070e 69c8 7990 0000 0000 6add 5490 0000 0000 6ba8 5b90 0000 0000 6cc6 7110 0000 0000 6d88 3d90 0000 0000 6ea6 |i.y.....j.T.....k.[.....l.q.....m.=.....n.|
  1237. 0x0738 5310 0000 0000 6f68 1f90 0000 0000 7086 3510 0000 0000 7151 3c10 0000 0000 7266 1710 0000 0000 7331 1e10 |S.....oh......p.5.....qQ<.....rf......s1..|
  1238. 0x0762 0000 0000 7445 f910 0000 0000 7511 0010 0000 0000 762f 1590 0000 0000 76f0 e210 0000 0000 780e f790 0000 |....tE......u.......v/......v.......x.....|
  1239. 0x078c 0000 78d0 c410 0000 0000 79ee d990 0000 0000 7ab0 a610 0000 0000 7bce bb90 0000 0000 7c99 c290 0000 0000 |..x.......y.......z.......{.......|.......|
  1240. 0x07b6 7dae 9d90 0000 0000 7e79 a490 0000 0000 7f8e 7f90 0103 0203 0405 0405 0405 0405 0405 0405 0405 0405 0405 |}.......~y................................|
  1241. 0x07e0 0405 0306 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 |..........................................|
  1242. 0x080a 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 |..........................................|
  1243. 0x0834 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0700 000d 8800 |..........................................|
  1244. 0x085e 0000 000d 8800 0400 001c 2001 0800 000e 1000 0d00 001c 2001 0800 000e 1000 0d00 001c 2001 0800 000e 1000 |.......... ........... ........... .......|
  1245. 0x0888 0d4c 4d54 0050 4d54 0043 4553 5400 4345 5400 0000 0000 0101 0101 0000 0000 0000 0101 0a43 4554 2d31 4345 |.LMT.PMT.CEST.CET..................CET-1CE|
  1246. 0x08b2 5354 2c4d 332e 352e 302c 4d31 302e 352e 302f 330a |ST,M3.5.0,M10.5.0/3.|
  1247.  
  1248. 36595 syslogd RET read 2246/0x8c6
  1249. 36595 syslogd CALL close(0x9)
  1250. 36595 syslogd RET close 0
  1251. 36595 syslogd CALL issetugid
  1252. 36595 syslogd RET issetugid 0
  1253. 36595 syslogd CALL open(0x801016a00,0<O_RDONLY>)
  1254. 36595 syslogd NAMI "/usr/share/zoneinfo/posixrules"
  1255. 36595 syslogd RET open 9
  1256. 36595 syslogd CALL fstat(0x9,0x7fffffffcde8)
  1257. 36595 syslogd STRU struct stat {dev=102, ino=64212785, mode=0100444, nlink=1, uid=0, gid=0, rdev=128259981, atime=1478378692.065790000, mtime=1475113503, ctime=1478361024.943988000, birthtime=1475113503, size=3519, blksize=32768, blocks=8, flags=0x0 }
  1258. 36595 syslogd RET fstat 0
  1259. 36595 syslogd CALL read(0x9,0x80106f300,0xa1e8)
  1260. 36595 syslogd GIO fd 9 read 3519 bytes
  1261. 0x0000 545a 6966 3200 0000 0000 0000 0000 0000 0000 0000 0000 0004 0000 0004 0000 0000 0000 00eb 0000 0004 0000 |TZif2.....................................|
  1262. 0x002a 0010 9ea6 1e70 9fba eb60 a086 0070 a19a cd60 a265 e270 a383 e9e0 a46a ae70 a535 a760 a653 caf0 a715 8960 |.....p...`...p...`.e.p.....j.p.5.`.S.....`|
  1263. 0x0054 a833 acf0 a8fe a5e0 aa13 8ef0 aade 87e0 abf3 70f0 acbe 69e0 add3 52f0 ae9e 4be0 afb3 34f0 b07e 2de0 b19c |.3................p...i...R...K...4..~-...|
  1264. 0x007e 5170 b267 4a60 b37c 3370 b447 2c60 b55c 1570 b627 0e60 b73b f770 b806 f060 b91b d970 b9e6 d260 bb04 f5f0 |Qp.gJ`.|3p.G,`.\.p.'.`.;.p...`...p...`....|
  1265. 0x00a8 bbc6 b460 bce4 d7f0 bdaf d0e0 bec4 b9f0 bf8f b2e0 c0a4 9bf0 c16f 94e0 c284 7df0 c34f 76e0 c464 5ff0 c52f |...`.....................o....}..Ov..d_../|
  1266. 0x00d2 58e0 c64d 7c70 c70f 3ae0 c82d 5e70 c8f8 5760 ca0d 4070 cad8 3960 cb88 f070 d223 f470 d260 fbe0 d375 e4f0 |X..M|p..:..-^p..W`[email protected]`...p.#.p.`...u..|
  1267. 0x00fc d440 dde0 d555 c6f0 d620 bfe0 d735 a8f0 d800 a1e0 d915 8af0 d9e0 83e0 dafe a770 dbc0 65e0 dcde 8970 dda9 |[email protected]... ...5.................p..e....p..|
  1268. 0x0126 8260 debe 6b70 df89 6460 e09e 4d70 e169 4660 e27e 2f70 e349 2860 e45e 1170 e557 2ee0 e647 2df0 e737 10e0 |.`..kp..d`..Mp.iF`.~/p.I(`.^.p.W...G-..7..|
  1269. 0x0150 e827 0ff0 e916 f2e0 ea06 f1f0 eaf6 d4e0 ebe6 d3f0 ecd6 b6e0 edc6 b5f0 eebf d360 efaf d270 f09f b560 f18f |.'.............................`...p...`..|
  1270. 0x017a b470 f27f 9760 f36f 9670 f45f 7960 f54f 7870 f63f 5b60 f72f 5a70 f828 77e0 f90f 3c70 fa08 59e0 faf8 58f0 |.p...`.o.p._y`.Oxp.?[`./Zp.(w...<p..Y...X.|
  1271. 0x01a4 fbe8 3be0 fcd8 3af0 fdc8 1de0 feb8 1cf0 ffa7 ffe0 0097 fef0 0187 e1e0 0277 e0f0 0370 fe60 0460 fd70 0550 |..;...:......................w...p.`.`.p.P|
  1272. 0x01ce e060 0640 df70 0730 c260 078d 1970 0910 a460 09ad 94f0 0af0 8660 0be0 8570 0cd9 a2e0 0dc0 6770 0eb9 84e0 |.`[email protected].`...p...`.......`...p......gp....|
  1273. 0x01f8 0fa9 83f0 1099 66e0 1189 65f0 1279 48e0 1369 47f0 1459 2ae0 1549 29f0 1639 0ce0 1729 0bf0 1822 2960 1908 |......f...e..yH..iG..Y*..I)..9...)...")`..|
  1274. 0x0222 edf0 1a02 0b60 1af2 0a70 1be1 ed60 1cd1 ec70 1dc1 cf60 1eb1 ce70 1fa1 b160 2076 00f0 2181 9360 2255 e2f0 |.....`...p...`...p...`...p...` v..!..`"U..|
  1275. 0x024c 236a afe0 2435 c4f0 254a 91e0 2615 a6f0 272a 73e0 27fe c370 290a 55e0 29de a570 2aea 37e0 2bbe 8770 2cd3 |#j..$5..%J..&...'*s.'..p).U.)..p*.7.+..p,.|
  1276. 0x0276 5460 2d9e 6970 2eb3 3660 2f7e 4b70 3093 1860 3167 67f0 3272 fa60 3347 49f0 3452 dc60 3527 2bf0 3632 be60 |T`-.ip..6`/~Kp0..`1gg.2r.`3GI.4R.`5'+.62.`|
  1277. 0x02a0 3707 0df0 381b dae0 38e6 eff0 39fb bce0 3ac6 d1f0 3bdb 9ee0 3caf ee70 3dbb 80e0 3e8f d070 3f9b 62e0 406f |7...8...8...9...:...;...<..p=...>..p?.b.@o|
  1278. 0x02ca b270 4184 7f60 424f 9470 4364 6160 442f 7670 4544 4360 45f3 a8f0 472d 5fe0 47d3 8af0 490d 41e0 49b3 6cf0 |.pA..`BO.pCda`D/vpEDC`E...G-_.G...I.A.I.l.|
  1279. 0x02f4 4aed 23e0 4b9c 8970 4cd6 4060 4d7c 6b70 4eb6 2260 4f5c 4d70 5096 0460 513c 2f70 5275 e660 531c 1170 5455 |J.#.K..pL.@`M|kpN."`O\MpP..`Q</pRu.`S..pTU|
  1280. 0x031e c860 54fb f370 5635 aa60 56e5 0ff0 581e c6e0 58c4 f1f0 59fe a8e0 5aa4 d3f0 5bde 8ae0 5c84 b5f0 5dbe 6ce0 |.`T..pV5.`V...X...X...Y...Z...[...\...].l.|
  1281. 0x0348 5e64 97f0 5f9e 4ee0 604d b470 6187 6b60 622d 9670 6367 4d60 640d 7870 6547 2f60 65ed 5a70 6727 1160 67cd |^d.._.N.`M.pa.k`b-.pcgM`d.xpeG/`e.Zpg'.`g.|
  1282. 0x0372 3c70 6906 f360 69ad 1e70 6ae6 d560 6b96 3af0 6ccf f1e0 6d76 1cf0 6eaf d3e0 6f55 fef0 708f b5e0 7135 e0f0 |<pi..`i..pj..`k.:.l...mv..n...oU..p...q5..|
  1283. 0x039c 726f 97e0 7315 c2f0 744f 79e0 74fe df70 7638 9660 76de c170 7818 7860 78be a370 79f8 5a60 7a9e 8570 7bd8 |ro..s...tOy.t..pv8.`v..px.x`x..py.Z`z..p{.|
  1284. 0x03c6 3c60 7c7e 6770 7db8 1e60 7e5e 4970 7f98 0060 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 |<`|~gp}..`~^Ip...`........................|
  1285. 0x03f0 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0203 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1286. 0x041a 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1287. 0x0444 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1288. 0x046e 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1289. 0x0498 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1290. 0x04c2 01ff ffc7 c001 00ff ffb9 b000 04ff ffc7 c001 08ff ffc7 c001 0c45 4454 0045 5354 0045 5754 0045 5054 0000 |.........................EDT.EST.EWT.EPT..|
  1291. 0x04ec 0000 0100 0000 0154 5a69 6632 0000 0000 0000 0000 0000 0000 0000 0000 0000 0500 0000 0500 0000 0000 0000 |.......TZif2..............................|
  1292. 0x0516 ec00 0000 0500 0000 14ff ffff ff5e 03f0 90ff ffff ff9e a61e 70ff ffff ff9f baeb 60ff ffff ffa0 8600 70ff |.............^..........p.......`.......p.|
  1293. 0x0540 ffff ffa1 9acd 60ff ffff ffa2 65e2 70ff ffff ffa3 83e9 e0ff ffff ffa4 6aae 70ff ffff ffa5 35a7 60ff ffff |......`.....e.p.............j.p.....5.`...|
  1294. 0x056a ffa6 53ca f0ff ffff ffa7 1589 60ff ffff ffa8 33ac f0ff ffff ffa8 fea5 e0ff ffff ffaa 138e f0ff ffff ffaa |..S.........`.....3.......................|
  1295. 0x0594 de87 e0ff ffff ffab f370 f0ff ffff ffac be69 e0ff ffff ffad d352 f0ff ffff ffae 9e4b e0ff ffff ffaf b334 |.........p.......i.......R.......K.......4|
  1296. 0x05be f0ff ffff ffb0 7e2d e0ff ffff ffb1 9c51 70ff ffff ffb2 674a 60ff ffff ffb3 7c33 70ff ffff ffb4 472c 60ff |......~-.......Qp.....gJ`.....|3p.....G,`.|
  1297. 0x05e8 ffff ffb5 5c15 70ff ffff ffb6 270e 60ff ffff ffb7 3bf7 70ff ffff ffb8 06f0 60ff ffff ffb9 1bd9 70ff ffff |....\.p.....'.`.....;.p.......`.......p...|
  1298. 0x0612 ffb9 e6d2 60ff ffff ffbb 04f5 f0ff ffff ffbb c6b4 60ff ffff ffbc e4d7 f0ff ffff ffbd afd0 e0ff ffff ffbe |....`...............`.....................|
  1299. 0x063c c4b9 f0ff ffff ffbf 8fb2 e0ff ffff ffc0 a49b f0ff ffff ffc1 6f94 e0ff ffff ffc2 847d f0ff ffff ffc3 4f76 |........................o........}......Ov|
  1300. 0x0666 e0ff ffff ffc4 645f f0ff ffff ffc5 2f58 e0ff ffff ffc6 4d7c 70ff ffff ffc7 0f3a e0ff ffff ffc8 2d5e 70ff |......d_....../X......M|p......:......-^p.|
  1301. 0x0690 ffff ffc8 f857 60ff ffff ffca 0d40 70ff ffff ffca d839 60ff ffff ffcb 88f0 70ff ffff ffd2 23f4 70ff ffff |.....W`[email protected]`.......p.....#.p...|
  1302. 0x06ba ffd2 60fb e0ff ffff ffd3 75e4 f0ff ffff ffd4 40dd e0ff ffff ffd5 55c6 f0ff ffff ffd6 20bf e0ff ffff ffd7 |..`[email protected]....... .......|
  1303. 0x06e4 35a8 f0ff ffff ffd8 00a1 e0ff ffff ffd9 158a f0ff ffff ffd9 e083 e0ff ffff ffda fea7 70ff ffff ffdb c065 |5.................................p......e|
  1304. 0x070e e0ff ffff ffdc de89 70ff ffff ffdd a982 60ff ffff ffde be6b 70ff ffff ffdf 8964 60ff ffff ffe0 9e4d 70ff |........p.......`......kp......d`......Mp.|
  1305. 0x0738 ffff ffe1 6946 60ff ffff ffe2 7e2f 70ff ffff ffe3 4928 60ff ffff ffe4 5e11 70ff ffff ffe5 572e e0ff ffff |....iF`.....~/p.....I(`.....^.p.....W.....|
  1306. 0x0762 ffe6 472d f0ff ffff ffe7 3710 e0ff ffff ffe8 270f f0ff ffff ffe9 16f2 e0ff ffff ffea 06f1 f0ff ffff ffea |..G-......7.......'.......................|
  1307. 0x078c f6d4 e0ff ffff ffeb e6d3 f0ff ffff ffec d6b6 e0ff ffff ffed c6b5 f0ff ffff ffee bfd3 60ff ffff ffef afd2 |..................................`.......|
  1308. 0x07b6 70ff ffff fff0 9fb5 60ff ffff fff1 8fb4 70ff ffff fff2 7f97 60ff ffff fff3 6f96 70ff ffff fff4 5f79 60ff |p.......`.......p.......`.....o.p....._y`.|
  1309. 0x07e0 ffff fff5 4f78 70ff ffff fff6 3f5b 60ff ffff fff7 2f5a 70ff ffff fff8 2877 e0ff ffff fff9 0f3c 70ff ffff |....Oxp.....?[`...../Zp.....(w.......<p...|
  1310. 0x080a fffa 0859 e0ff ffff fffa f858 f0ff ffff fffb e83b e0ff ffff fffc d83a f0ff ffff fffd c81d e0ff ffff fffe |...Y.......X.......;.......:..............|
  1311. 0x0834 b81c f0ff ffff ffff a7ff e000 0000 0000 97fe f000 0000 0001 87e1 e000 0000 0002 77e0 f000 0000 0003 70fe |................................w.......p.|
  1312. 0x085e 6000 0000 0004 60fd 7000 0000 0005 50e0 6000 0000 0006 40df 7000 0000 0007 30c2 6000 0000 0007 8d19 7000 |`.....`.p.....P.`[email protected].`.......p.|
  1313. 0x0888 0000 0009 10a4 6000 0000 0009 ad94 f000 0000 000a f086 6000 0000 000b e085 7000 0000 000c d9a2 e000 0000 |......`...............`.......p...........|
  1314. 0x08b2 000d c067 7000 0000 000e b984 e000 0000 000f a983 f000 0000 0010 9966 e000 0000 0011 8965 f000 0000 0012 |...gp......................f.......e......|
  1315. 0x08dc 7948 e000 0000 0013 6947 f000 0000 0014 592a e000 0000 0015 4929 f000 0000 0016 390c e000 0000 0017 290b |yH......iG......Y*......I)......9.......).|
  1316. 0x0906 f000 0000 0018 2229 6000 0000 0019 08ed f000 0000 001a 020b 6000 0000 001a f20a 7000 0000 001b e1ed 6000 |......")`...............`.......p.......`.|
  1317. 0x0930 0000 001c d1ec 7000 0000 001d c1cf 6000 0000 001e b1ce 7000 0000 001f a1b1 6000 0000 0020 7600 f000 0000 |......p.......`.......p.......`.... v.....|
  1318. 0x095a 0021 8193 6000 0000 0022 55e2 f000 0000 0023 6aaf e000 0000 0024 35c4 f000 0000 0025 4a91 e000 0000 0026 |.!..`...."U......#j......$5......%J......&|
  1319. 0x0984 15a6 f000 0000 0027 2a73 e000 0000 0027 fec3 7000 0000 0029 0a55 e000 0000 0029 dea5 7000 0000 002a ea37 |.......'*s.....'..p....).U.....)..p....*.7|
  1320. 0x09ae e000 0000 002b be87 7000 0000 002c d354 6000 0000 002d 9e69 7000 0000 002e b336 6000 0000 002f 7e4b 7000 |.....+..p....,.T`....-.ip......6`..../~Kp.|
  1321. 0x09d8 0000 0030 9318 6000 0000 0031 6767 f000 0000 0032 72fa 6000 0000 0033 4749 f000 0000 0034 52dc 6000 0000 |...0..`....1gg.....2r.`....3GI.....4R.`...|
  1322. 0x0a02 0035 272b f000 0000 0036 32be 6000 0000 0037 070d f000 0000 0038 1bda e000 0000 0038 e6ef f000 0000 0039 |.5'+.....62.`....7.......8.......8.......9|
  1323. 0x0a2c fbbc e000 0000 003a c6d1 f000 0000 003b db9e e000 0000 003c afee 7000 0000 003d bb80 e000 0000 003e 8fd0 |.......:.......;.......<..p....=.......>..|
  1324. 0x0a56 7000 0000 003f 9b62 e000 0000 0040 6fb2 7000 0000 0041 847f 6000 0000 0042 4f94 7000 0000 0043 6461 6000 |[email protected]..`....BO.p....Cda`.|
  1325. 0x0a80 0000 0044 2f76 7000 0000 0045 4443 6000 0000 0045 f3a8 f000 0000 0047 2d5f e000 0000 0047 d38a f000 0000 |...D/vp....EDC`....E.......G-_.....G......|
  1326. 0x0aaa 0049 0d41 e000 0000 0049 b36c f000 0000 004a ed23 e000 0000 004b 9c89 7000 0000 004c d640 6000 0000 004d |.I.A.....I.l.....J.#.....K..p....L.@`....M|
  1327. 0x0ad4 7c6b 7000 0000 004e b622 6000 0000 004f 5c4d 7000 0000 0050 9604 6000 0000 0051 3c2f 7000 0000 0052 75e6 ||kp....N."`....O\Mp....P..`....Q</p....Ru.|
  1328. 0x0afe 6000 0000 0053 1c11 7000 0000 0054 55c8 6000 0000 0054 fbf3 7000 0000 0056 35aa 6000 0000 0056 e50f f000 |`....S..p....TU.`....T..p....V5.`....V....|
  1329. 0x0b28 0000 0058 1ec6 e000 0000 0058 c4f1 f000 0000 0059 fea8 e000 0000 005a a4d3 f000 0000 005b de8a e000 0000 |...X.......X.......Y.......Z.......[......|
  1330. 0x0b52 005c 84b5 f000 0000 005d be6c e000 0000 005e 6497 f000 0000 005f 9e4e e000 0000 0060 4db4 7000 0000 0061 |.\.......].l.....^d......_.N.....`M.p....a|
  1331. 0x0b7c 876b 6000 0000 0062 2d96 7000 0000 0063 674d 6000 0000 0064 0d78 7000 0000 0065 472f 6000 0000 0065 ed5a |.k`....b-.p....cgM`....d.xp....eG/`....e.Z|
  1332. 0x0ba6 7000 0000 0067 2711 6000 0000 0067 cd3c 7000 0000 0069 06f3 6000 0000 0069 ad1e 7000 0000 006a e6d5 6000 |p....g'.`....g.<p....i..`....i..p....j..`.|
  1333. 0x0bd0 0000 006b 963a f000 0000 006c cff1 e000 0000 006d 761c f000 0000 006e afd3 e000 0000 006f 55fe f000 0000 |...k.:.....l.......mv......n.......oU.....|
  1334. 0x0bfa 0070 8fb5 e000 0000 0071 35e0 f000 0000 0072 6f97 e000 0000 0073 15c2 f000 0000 0074 4f79 e000 0000 0074 |.p.......q5......ro......s.......tOy.....t|
  1335. 0x0c24 fedf 7000 0000 0076 3896 6000 0000 0076 dec1 7000 0000 0078 1878 6000 0000 0078 bea3 7000 0000 0079 f85a |..p....v8.`....v..p....x.x`....x..p....y.Z|
  1336. 0x0c4e 6000 0000 007a 9e85 7000 0000 007b d83c 6000 0000 007c 7e67 7000 0000 007d b81e 6000 0000 007e 5e49 7000 |`....z..p....{.<`....|~gp....}..`....~^Ip.|
  1337. 0x0c78 0000 007f 9800 6002 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 |......`...................................|
  1338. 0x0ca2 0102 0102 0102 0102 0102 0102 0102 0304 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 |..........................................|
  1339. 0x0ccc 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 |..........................................|
  1340. 0x0cf6 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 |..........................................|
  1341. 0x0d20 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 |..........................................|
  1342. 0x0d4a 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 02ff ffba 9e00 00ff ffc7 |..........................................|
  1343. 0x0d74 c001 04ff ffb9 b000 08ff ffc7 c001 0cff ffc7 c001 104c 4d54 0045 4454 0045 5354 0045 5754 0045 5054 0000 |.....................LMT.EDT.EST.EWT.EPT..|
  1344. 0x0d9e 0000 0001 0000 0000 010a 4553 5435 4544 542c 4d33 2e32 2e30 2c4d 3131 2e31 2e30 0a |..........EST5EDT,M3.2.0,M11.1.0.|
  1345.  
  1346. 36595 syslogd RET read 3519/0xdbf
  1347. 36595 syslogd CALL close(0x9)
  1348. 36595 syslogd RET close 0
  1349. 36595 syslogd CALL open(0x408c00,0<O_RDONLY>)
  1350. 36595 syslogd NAMI "/etc/syslog.conf"
  1351. 36595 syslogd RET open 9
  1352. 36595 syslogd CALL fstat(0x9,0x7fffffffb9f8)
  1353. 36595 syslogd STRU struct stat {dev=72, ino=14, mode=0100644, nlink=1, uid=0, gid=0, rdev=13282, atime=1513377477.200133000, mtime=1513379056.931892000, ctime=1513379056.931892000, birthtime=1512348332.541984000, size=1768, blksize=32768, blocks=8, flags=0x0 }
  1354. 36595 syslogd RET fstat 0
  1355. 36595 syslogd CALL read(0x9,0x80103c640,0x8000)
  1356. 36595 syslogd GIO fd 9 read 1768 bytes
  1357. 0x0000 2320 2446 7265 6542 5344 3a20 7265 6c65 6e67 2f31 312e 312f 6574 632f 7379 736c 6f67 2e63 6f6e 6620 3330 |# $FreeBSD: releng/11.1/etc/syslog.conf 30|
  1358. 0x002a 3837 3231 2032 3031 362d 3131 2d31 3620 3037 3a30 343a 3439 5a20 6261 7074 2024 0a0a 2320 506f 6b75 6420 |8721 2016-11-16 07:04:49Z bapt $..# Pokud |
  1359. 0x0054 6368 6365 6d65 2076 7962 7261 7420 706f 757a 6520 7a70 72e1 7679 2064 616e e920 7072 696f 7269 7479 2c20 |chceme vybrat pouze zpr.vy dan. priority, |
  1360. 0x007e 706f 75be 696a 656d 6520 6f70 6572 e174 6f72 2022 3d22 2028 6e61 70f8 2e20 6d61 696c 2e3d 696e 666f 292e |pou.ijeme oper.tor "=" (nap.. mail.=info).|
  1361. 0x00a8 0a23 2050 6f6b 7564 2063 6863 656d 6520 7679 6272 6174 207a 7072 e176 7920 76b9 6563 6820 7072 696f 7269 |.# Pokud chceme vybrat zpr.vy v.ech priori|
  1362. 0x00d2 7420 7320 76fd 6a69 6d6b 6f75 206a 6564 6ee9 2c20 706f 75be 696a 656d 6520 6f70 6572 e174 6f72 2022 2122 |t s v.jimkou jedn., pou.ijeme oper.tor "!"|
  1363. 0x00fc 0a23 2020 286e 6170 f82e 206d 6169 6c2e 2a3b 6d61 696c 2e21 3d69 6e66 6f20 7679 6265 7265 207a 7072 e176 |.# (nap.. mail.*;mail.!=info vybere zpr.v|
  1364. 0x0126 7920 6b61 7465 676f 7269 6520 6d61 696c 2076 b965 6368 2070 7269 6f72 6974 2073 2076 fd6a 696d 6b6f 7520 |y kategorie mail v.ech priorit s v.jimkou |
  1365. 0x0150 696e 666f 292e 0a23 2050 6f6b 7564 2062 7963 686f 6d20 6368 74ec 6c69 2076 7962 7261 7420 7a70 72e1 7679 |info)..# Pokud bychom cht.li vybrat zpr.vy|
  1366. 0x017a 206b 6174 6567 6f72 6965 2064 6165 6d6f 6e20 7620 726f 7a73 6168 7520 7072 696f 7269 7420 696e 666f 2061 | kategorie daemon v rozsahu priorit info a|
  1367. 0x01a4 be20 616c 6572 742c 2070 6f75 be69 6a65 6d65 0a23 2020 7ae1 7069 733a 2064 6165 6d6f 6e2e 696e 666f 3b64 |. alert, pou.ijeme.# z.pis: daemon.info;d|
  1368. 0x01ce 6165 6d6f 6e2e 2161 6c65 7274 2e0a 2320 5520 6a65 646e 6f68 6f20 6ded 7374 6120 7572 e865 6eed 206d f9be |aemon.!alert..# U jednoho m.sta ur.en. m..|
  1369. 0x01f8 656d 6520 7576 e973 7420 6920 76ed 6365 206b 6174 6567 6f72 69ed 207a 7072 e176 2c20 7620 746f 6d20 70f8 |eme uv.st i v.ce kategori. zpr.v, v tom p.|
  1370. 0x0222 ed70 6164 ec20 6a65 206f 6464 ec6c ed6d 6520 e8e1 726b 6f75 2e0a 0a23 207a e17a 6e61 6d79 2076 7970 6973 |.pad. je odd.l.me ..rkou...# z.znamy vypis|
  1371. 0x024c 756a ed63 ed20 7365 206e 6120 6b6f 6e7a 6f6c 690a 2a2e 6572 723b 6b65 726e 2e77 6172 6e69 6e67 3b61 7574 |uj.c. se na konzoli.*.err;kern.warning;aut|
  1372. 0x0276 682e 6e6f 7469 6365 3b6d 6169 6c2e 6372 6974 0909 2f64 6576 2f63 6f6e 736f 6c65 0a0a 2320 74e9 6dec f820 |h.notice;mail.crit../dev/console..# t.m.. |
  1373. 0x02a0 7673 6520 646f 206d 6573 7361 6765 730a 2a2e 6e6f 7469 6365 3b61 7574 6870 7269 762e 6e6f 6e65 3b6b 6572 |vse do messages.*.notice;authpriv.none;ker|
  1374. 0x02ca 6e2e 6465 6275 673b 6c70 722e 696e 666f 3b6d 6169 6c2e 6372 6974 3b6e 6577 732e 6572 723b 6c6f 6361 6c30 |n.debug;lpr.info;mail.crit;news.err;local0|
  1375. 0x02f4 2e6e 6f6e 653b 6c6f 6361 6c31 2e6e 6f6e 6509 2f76 6172 2f6c 6f67 2f6d 6573 7361 6765 730a 0a23 2076 b965 |.none;local1.none./var/log/messages..# v.e|
  1376. 0x031e 6368 6e79 2073 6563 7572 6974 7920 7ae1 7a6e 616d 790a 7365 6375 7269 7479 2e2a 0909 0909 0909 2f76 6172 |chny security z.znamy.security.*....../var|
  1377. 0x0348 2f6c 6f67 2f73 6563 7572 6974 790a 0a23 2061 7574 6f72 697a 61e8 6eed 207a e17a 6e61 6d79 2c20 736f 7562 |/log/security..# autoriza.n. z.znamy, soub|
  1378. 0x0372 6f72 206d e120 6465 6661 756c 746e ec20 7072 e176 6120 3630 300a 6175 7468 2e69 6e66 6f3b 6175 7468 7072 |or m. defaultn. pr.va 600.auth.info;authpr|
  1379. 0x039c 6976 2e69 6e66 6f09 0909 0909 2f76 6172 2f6c 6f67 2f61 7574 682e 6c6f 670a 0a23 207a e17a 6e61 6d79 206d |iv.info...../var/log/auth.log..# z.znamy m|
  1380. 0x03c6 6169 6c73 6572 7665 7275 206d 616a ed63 ed20 6c65 7665 6c20 696e 666f 2061 2076 79b9 b9ed 0a6d 6169 6c2e |ailserveru maj.c. level info a vy....mail.|
  1381. 0x03f0 696e 666f 0909 0909 0909 2f76 6172 2f6c 6f67 2f6d 6169 6c6c 6f67 0a0a 2320 7ae1 7a6e 616d 7920 6674 7020 |info....../var/log/maillog..# z.znamy ftp |
  1382. 0x041a 64e9 6d6f 6ef9 206d 616a ed63 ed20 6c65 7665 6c20 696e 666f 2061 2076 79b9 b9ed 0a66 7470 2e69 6e66 6f09 |d.mon. maj.c. level info a vy....ftp.info.|
  1383. 0x0444 0909 0909 092f 7661 722f 6c6f 672f 7866 6572 6c6f 670a 0a23 2070 726f 746f 6b6f 6c6f 76e1 6e69 2076 b965 |...../var/log/xferlog..# protokolov.ni v.e|
  1384. 0x046e 6368 207a 7072 e176 2063 726f 6e75 0a63 726f 6e2e 2a09 0909 0909 0909 2f76 6172 2f6c 6f67 2f63 726f 6e0a |ch zpr.v cronu.cron.*......./var/log/cron.|
  1385. 0x0498 0a23 206c 6f67 2069 7066 7720 6d65 7373 6167 6573 2077 6974 686f 7574 2073 796e 6369 6e67 2061 6674 6572 |.# log ipfw messages without syncing after|
  1386. 0x04c2 2065 7665 7279 206d 6573 7361 6765 0a21 6970 6677 0a2a 2e2a 0909 0909 0909 092d 2f76 6172 2f6c 6f67 2f69 | every message.!ipfw.*.*.......-/var/log/i|
  1387. 0x04ec 7066 770a 0a21 2d64 6576 640a 2a2e 3d64 6562 7567 0909 0909 0909 2f76 6172 2f6c 6f67 2f64 6562 7567 2e6c |pfw..!-devd.*.=debug....../var/log/debug.l|
  1388. 0x0516 6f67 0a0a 2320 7072 6f74 6f6b 6f6c 6f76 e16e ed20 76b9 6563 6820 7a70 72e1 7620 7320 6c65 7665 6c20 656d |og..# protokolov.n. v.ech zpr.v s level em|
  1389. 0x0540 6572 6765 2061 2076 79b9 b9ed 6d20 286b 616d 6b6f 6c69 290a 2a2e 656d 6572 6709 0909 0909 0909 2a0a 0a23 |erge a vy...m (kamkoli).*.emerg.......*..#|
  1390. 0x056a 2075 6e63 6f6d 6d65 6e74 2074 6869 7320 746f 206c 6f67 2061 6c6c 2077 7269 7465 7320 746f 202f 6465 762f | uncomment this to log all writes to /dev/|
  1391. 0x0594 636f 6e73 6f6c 6520 746f 202f 7661 722f 6c6f 672f 636f 6e73 6f6c 652e 6c6f 670a 2320 746f 7563 6820 2f76 |console to /var/log/console.log.# touch /v|
  1392. 0x05be 6172 2f6c 6f67 2f63 6f6e 736f 6c65 2e6c 6f67 2061 6e64 2063 686d 6f64 2069 7420 746f 206d 6f64 6520 3630 |ar/log/console.log and chmod it to mode 60|
  1393. 0x05e8 3020 6265 666f 7265 2069 7420 7769 6c6c 2077 6f72 6b0a 2363 6f6e 736f 6c65 2e69 6e66 6f09 0909 0909 092f |0 before it will work.#console.info....../|
  1394. 0x0612 7661 722f 6c6f 672f 636f 6e73 6f6c 652e 6c6f 670a 0a23 2076 2070 f8ed 7061 64ec 2c20 be65 2063 6863 656d |var/log/console.log..# v p..pad., .e chcem|
  1395. 0x063c 6520 6c6f 676f 7661 7420 6e61 2076 7a64 e16c 656e fd20 7374 726f 6a0a 232a 2e2a 0909 0909 0909 0940 6c6f |e logovat na vzd.len. stroj.#*.*.......@lo|
  1396. 0x0666 6768 6f73 740a 0a23 206c 6f67 6f76 e16e ed20 76e8 6563 6820 4d69 6b72 6f54 696b 207a 61f8 ed7a 656e ed20 |ghost..# logov.n. v.ech MikroTik za..zen. |
  1397. 0x0690 7620 73ed 7469 0a6c 6f63 616c 302e 2a20 2f76 6172 2f6c 6f67 2f6d 696b 726f 7469 6b2e 6c6f 670a 0a23 206c |v s.ti.local0.* /var/log/mikrotik.log..# l|
  1398. 0x06ba 6f67 6f76 e16e ed20 4e52 5045 0a6c 6f63 616c 312e 2a09 0909 0909 092f 7661 722f 6c6f 672f 6e72 7065 322e |ogov.n. NRPE.local1.*....../var/log/nrpe2.|
  1399. 0x06e4 6c6f 670a |log.|
  1400.  
  1401. 36595 syslogd RET read 1768/0x6e8
  1402. 36595 syslogd CALL write(0x1,0x80101b000,0x4e)
  1403. 36595 syslogd GIO fd 1 wrote 78 bytes
  1404. "cfline("*.err;kern.warning;auth.notice;mail.crit /dev/console", f, "*", "*")
  1405. "
  1406. 36595 syslogd RET write 78/0x4e
  1407. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc86a,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1408. 36595 syslogd NAMI "/dev/console"
  1409. 36595 syslogd RET openat -1 errno 4 Interrupted system call
  1410. 36595 syslogd PSIG SIGALRM caught handler=0x404c60 mask=0x0 code=SI_KERNEL
  1411. 36595 syslogd CALL sigreturn(0x7fffffffb0e0)
  1412. 36595 syslogd RET sigreturn JUSTRETURN
  1413. 36595 syslogd CALL stat(0x7fffffffaf30,0x7fffffffaeb8)
  1414. 36595 syslogd NAMI "/usr/share/nls/C/libc.cat"
  1415. 36595 syslogd RET stat -1 errno 2 No such file or directory
  1416. 36595 syslogd CALL stat(0x7fffffffaf30,0x7fffffffaeb8)
  1417. 36595 syslogd NAMI "/usr/share/nls/libc/C"
  1418. 36595 syslogd RET stat -1 errno 2 No such file or directory
  1419. 36595 syslogd CALL stat(0x7fffffffaf30,0x7fffffffaeb8)
  1420. 36595 syslogd NAMI "/usr/local/share/nls/C/libc.cat"
  1421. 36595 syslogd RET stat -1 errno 2 No such file or directory
  1422. 36595 syslogd CALL stat(0x7fffffffaf30,0x7fffffffaeb8)
  1423. 36595 syslogd NAMI "/usr/local/share/nls/libc/C"
  1424. 36595 syslogd RET stat -1 errno 2 No such file or directory
  1425. 36595 syslogd CALL write(0x1,0x80101b000,0x2f)
  1426. 36595 syslogd GIO fd 1 wrote 47 bytes
  1427. "syslogd: /dev/console: Interrupted system call
  1428. "
  1429. 36595 syslogd RET write 47/0x2f
  1430. 36595 syslogd CALL write(0x1,0x80101b000,0x5a)
  1431. 36595 syslogd GIO fd 1 wrote 90 bytes
  1432. "logmsg: pri 53, flags 4, from bsd-ap2, msg syslogd: /dev/console: Interrupted system call
  1433. "
  1434. 36595 syslogd RET write 90/0x5a
  1435. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffae30,0x7fffffffae20)
  1436. 36595 syslogd RET sigprocmask 0
  1437. 36595 syslogd CALL access(0x800babf20,0x4<R_OK>)
  1438. 36595 syslogd NAMI "/etc/localtime"
  1439. 36595 syslogd RET access 0
  1440. 36595 syslogd CALL open(0x800babf20,0<O_RDONLY>)
  1441. 36595 syslogd NAMI "/etc/localtime"
  1442. 36595 syslogd RET open 10/0xa
  1443. 36595 syslogd CALL fstat(0xa,0x7fffffffad58)
  1444. 36595 syslogd STRU struct stat {dev=72, ino=10914872, mode=0100444, nlink=1, uid=0, gid=0, rdev=21810201, atime=1478378692.065713000, mtime=1478361152.008279000, ctime=1478361152.008279000, birthtime=1478361152.008214000, size=2246, blksize=32768, blocks=8, flags=0x0 }
  1445. 36595 syslogd RET fstat 0
  1446. 36595 syslogd CALL read(0xa,0x80107c2c0,0xa1e8)
  1447. 36595 syslogd GIO fd 10 read 2246 bytes
  1448. 0x0000 545a 6966 3200 0000 0000 0000 0000 0000 0000 0000 0000 0006 0000 0006 0000 0000 0000 008d 0000 0006 0000 |TZif2.....................................|
  1449. 0x002a 0009 9b0c 1760 9bd5 daf0 9cd9 ae90 9da4 b590 9eb9 9090 9f84 9790 c809 7190 cce7 4b10 cda9 1790 cea2 4310 |.....`......................q...K.......C.|
  1450. 0x0054 cf92 3410 d06e 5e90 d179 ff10 d2a1 4f10 d380 1c90 d449 d210 d54c 3810 d629 b410 d72c 1a10 d809 9610 d901 |..4..n^..y....O......I...L8..)...,........|
  1451. 0x007e 7010 d9e9 7810 10ed 6470 1164 2790 1254 1890 134d 4410 1433 fa90 1523 eb90 1613 dc90 1703 cd90 17f3 be90 |p...x...dp.d'..T...MD..3...#..............|
  1452. 0x00a8 18e3 af90 19d3 a090 1ac3 9190 1bbc bd10 1cac ae10 1d9c 9f10 1e8c 9010 1f7c 8110 206c 7210 215c 6310 224c |.............................|.. lr.!\c."L|
  1453. 0x00d2 5410 233c 4510 242c 3610 251c 2710 260c 1810 2705 4390 27f5 3490 28e5 2590 29d5 1690 2ac5 0790 2bb4 f890 |T.#<E.$,6.%.'.&...'.C.'.4.(.%.)...*...+...|
  1454. 0x00fc 2ca4 e990 2d94 da90 2e84 cb90 2f74 bc90 3064 ad90 315d d910 3272 b410 333d bb10 3452 9610 351d 9d10 3632 |,...-......./t..0d..1]..2r..3=..4R..5...62|
  1455. 0x0126 7810 36fd 7f10 381b 9490 38dd 6110 39fb 7690 3abd 4310 3bdb 5890 3ca6 5f90 3dbb 3a90 3e86 4190 3f9b 1c90 |x.6...8...8.a.9.v.:.C.;.X.<._.=.:.>.A.?...|
  1456. 0x0150 4066 2390 4184 3910 4246 0590 4364 1b10 4425 e790 4543 fd10 4605 c990 4723 df10 47ee e610 4903 c110 49ce |@f#.A.9.BF..Cd..D%..EC..F...G#..G...I...I.|
  1457. 0x017a c810 4ae3 a310 4bae aa10 4ccc bf90 4d8e 8c10 4eac a190 4f6e 6e10 508c 8390 5157 8a90 526c 6590 5337 6c90 |..J...K...L...M...N...Onn.P...QW..Rle.S7l.|
  1458. 0x01a4 544c 4790 5517 4e90 562c 2990 56f7 3090 5815 4610 58d7 1290 59f5 2810 5ab6 f490 5bd5 0a10 5ca0 1110 5db4 |TLG.U.N.V,).V.0.X.F.X...Y.(.Z...[...\...].|
  1459. 0x01ce ec10 5e7f f310 5f94 ce10 605f d510 617d ea90 623f b710 635d cc90 641f 9910 653d ae90 6608 b590 671d 9090 |..^..._...`_..a}..b?..c]..d...e=..f...g...|
  1460. 0x01f8 67e8 9790 68fd 7290 69c8 7990 6add 5490 6ba8 5b90 6cc6 7110 6d88 3d90 6ea6 5310 6f68 1f90 7086 3510 7151 |g...h.r.i.y.j.T.k.[.l.q.m.=.n.S.oh..p.5.qQ|
  1461. 0x0222 3c10 7266 1710 7331 1e10 7445 f910 7511 0010 762f 1590 76f0 e210 780e f790 78d0 c410 79ee d990 7ab0 a610 |<.rf..s1..tE..u...v/..v...x...x...y...z...|
  1462. 0x024c 7bce bb90 7c99 c290 7dae 9d90 7e79 a490 7f8e 7f90 0001 0203 0203 0203 0203 0203 0203 0203 0203 0203 0203 |{...|...}...~y............................|
  1463. 0x0276 0104 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 |..........................................|
  1464. 0x02a0 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 |..........................................|
  1465. 0x02ca 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0504 0500 001c 2001 0000 |...................................... ...|
  1466. 0x02f4 000e 1000 0500 001c 2001 0000 000e 1000 0500 001c 2001 0000 000e 1000 0543 4553 5400 4345 5400 0000 0101 |........ ........... ........CEST.CET.....|
  1467. 0x031e 0101 0000 0000 0101 545a 6966 3200 0000 0000 0000 0000 0000 0000 0000 0000 0008 0000 0008 0000 0000 0000 |........TZif2.............................|
  1468. 0x0348 008f 0000 0008 0000 0011 ffff ffff 1e49 92f8 ffff ffff 6ccf eaf8 ffff ffff 9b0c 1760 ffff ffff 9bd5 daf0 |...............I......l..........`........|
  1469. 0x0372 ffff ffff 9cd9 ae90 ffff ffff 9da4 b590 ffff ffff 9eb9 9090 ffff ffff 9f84 9790 ffff ffff c809 7190 ffff |......................................q...|
  1470. 0x039c ffff cce7 4b10 ffff ffff cda9 1790 ffff ffff cea2 4310 ffff ffff cf92 3410 ffff ffff d06e 5e90 ffff ffff |....K...............C.......4......n^.....|
  1471. 0x03c6 d179 ff10 ffff ffff d2a1 4f10 ffff ffff d380 1c90 ffff ffff d449 d210 ffff ffff d54c 3810 ffff ffff d629 |.y........O..............I.......L8......)|
  1472. 0x03f0 b410 ffff ffff d72c 1a10 ffff ffff d809 9610 ffff ffff d901 7010 ffff ffff d9e9 7810 0000 0000 10ed 6470 |.......,................p.......x.......dp|
  1473. 0x041a 0000 0000 1164 2790 0000 0000 1254 1890 0000 0000 134d 4410 0000 0000 1433 fa90 0000 0000 1523 eb90 0000 |.....d'......T.......MD......3.......#....|
  1474. 0x0444 0000 1613 dc90 0000 0000 1703 cd90 0000 0000 17f3 be90 0000 0000 18e3 af90 0000 0000 19d3 a090 0000 0000 |..........................................|
  1475. 0x046e 1ac3 9190 0000 0000 1bbc bd10 0000 0000 1cac ae10 0000 0000 1d9c 9f10 0000 0000 1e8c 9010 0000 0000 1f7c |.........................................||
  1476. 0x0498 8110 0000 0000 206c 7210 0000 0000 215c 6310 0000 0000 224c 5410 0000 0000 233c 4510 0000 0000 242c 3610 |...... lr.....!\c....."LT.....#<E.....$,6.|
  1477. 0x04c2 0000 0000 251c 2710 0000 0000 260c 1810 0000 0000 2705 4390 0000 0000 27f5 3490 0000 0000 28e5 2590 0000 |....%.'.....&.......'.C.....'.4.....(.%...|
  1478. 0x04ec 0000 29d5 1690 0000 0000 2ac5 0790 0000 0000 2bb4 f890 0000 0000 2ca4 e990 0000 0000 2d94 da90 0000 0000 |..).......*.......+.......,.......-.......|
  1479. 0x0516 2e84 cb90 0000 0000 2f74 bc90 0000 0000 3064 ad90 0000 0000 315d d910 0000 0000 3272 b410 0000 0000 333d |......../t......0d......1]......2r......3=|
  1480. 0x0540 bb10 0000 0000 3452 9610 0000 0000 351d 9d10 0000 0000 3632 7810 0000 0000 36fd 7f10 0000 0000 381b 9490 |......4R......5.......62x.....6.......8...|
  1481. 0x056a 0000 0000 38dd 6110 0000 0000 39fb 7690 0000 0000 3abd 4310 0000 0000 3bdb 5890 0000 0000 3ca6 5f90 0000 |....8.a.....9.v.....:.C.....;.X.....<._...|
  1482. 0x0594 0000 3dbb 3a90 0000 0000 3e86 4190 0000 0000 3f9b 1c90 0000 0000 4066 2390 0000 0000 4184 3910 0000 0000 |..=.:.....>.A.....?.......@f#.....A.9.....|
  1483. 0x05be 4246 0590 0000 0000 4364 1b10 0000 0000 4425 e790 0000 0000 4543 fd10 0000 0000 4605 c990 0000 0000 4723 |BF......Cd......D%......EC......F.......G#|
  1484. 0x05e8 df10 0000 0000 47ee e610 0000 0000 4903 c110 0000 0000 49ce c810 0000 0000 4ae3 a310 0000 0000 4bae aa10 |......G.......I.......I.......J.......K...|
  1485. 0x0612 0000 0000 4ccc bf90 0000 0000 4d8e 8c10 0000 0000 4eac a190 0000 0000 4f6e 6e10 0000 0000 508c 8390 0000 |....L.......M.......N.......Onn.....P.....|
  1486. 0x063c 0000 5157 8a90 0000 0000 526c 6590 0000 0000 5337 6c90 0000 0000 544c 4790 0000 0000 5517 4e90 0000 0000 |..QW......Rle.....S7l.....TLG.....U.N.....|
  1487. 0x0666 562c 2990 0000 0000 56f7 3090 0000 0000 5815 4610 0000 0000 58d7 1290 0000 0000 59f5 2810 0000 0000 5ab6 |V,).....V.0.....X.F.....X.......Y.(.....Z.|
  1488. 0x0690 f490 0000 0000 5bd5 0a10 0000 0000 5ca0 1110 0000 0000 5db4 ec10 0000 0000 5e7f f310 0000 0000 5f94 ce10 |......[.......\.......].......^......._...|
  1489. 0x06ba 0000 0000 605f d510 0000 0000 617d ea90 0000 0000 623f b710 0000 0000 635d cc90 0000 0000 641f 9910 0000 |....`_......a}......b?......c]......d.....|
  1490. 0x06e4 0000 653d ae90 0000 0000 6608 b590 0000 0000 671d 9090 0000 0000 67e8 9790 0000 0000 68fd 7290 0000 0000 |..e=......f.......g.......g.......h.r.....|
  1491. 0x070e 69c8 7990 0000 0000 6add 5490 0000 0000 6ba8 5b90 0000 0000 6cc6 7110 0000 0000 6d88 3d90 0000 0000 6ea6 |i.y.....j.T.....k.[.....l.q.....m.=.....n.|
  1492. 0x0738 5310 0000 0000 6f68 1f90 0000 0000 7086 3510 0000 0000 7151 3c10 0000 0000 7266 1710 0000 0000 7331 1e10 |S.....oh......p.5.....qQ<.....rf......s1..|
  1493. 0x0762 0000 0000 7445 f910 0000 0000 7511 0010 0000 0000 762f 1590 0000 0000 76f0 e210 0000 0000 780e f790 0000 |....tE......u.......v/......v.......x.....|
  1494. 0x078c 0000 78d0 c410 0000 0000 79ee d990 0000 0000 7ab0 a610 0000 0000 7bce bb90 0000 0000 7c99 c290 0000 0000 |..x.......y.......z.......{.......|.......|
  1495. 0x07b6 7dae 9d90 0000 0000 7e79 a490 0000 0000 7f8e 7f90 0103 0203 0405 0405 0405 0405 0405 0405 0405 0405 0405 |}.......~y................................|
  1496. 0x07e0 0405 0306 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 |..........................................|
  1497. 0x080a 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 |..........................................|
  1498. 0x0834 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0706 0700 000d 8800 |..........................................|
  1499. 0x085e 0000 000d 8800 0400 001c 2001 0800 000e 1000 0d00 001c 2001 0800 000e 1000 0d00 001c 2001 0800 000e 1000 |.......... ........... ........... .......|
  1500. 0x0888 0d4c 4d54 0050 4d54 0043 4553 5400 4345 5400 0000 0000 0101 0101 0000 0000 0000 0101 0a43 4554 2d31 4345 |.LMT.PMT.CEST.CET..................CET-1CE|
  1501. 0x08b2 5354 2c4d 332e 352e 302c 4d31 302e 352e 302f 330a |ST,M3.5.0,M10.5.0/3.|
  1502.  
  1503. 36595 syslogd RET read 2246/0x8c6
  1504. 36595 syslogd CALL close(0xa)
  1505. 36595 syslogd RET close 0
  1506. 36595 syslogd CALL issetugid
  1507. 36595 syslogd RET issetugid 0
  1508. 36595 syslogd CALL open(0x801016a00,0<O_RDONLY>)
  1509. 36595 syslogd NAMI "/usr/share/zoneinfo/posixrules"
  1510. 36595 syslogd RET open 10/0xa
  1511. 36595 syslogd CALL fstat(0xa,0x7fffffffaba8)
  1512. 36595 syslogd STRU struct stat {dev=102, ino=64212785, mode=0100444, nlink=1, uid=0, gid=0, rdev=128259981, atime=1478378692.065790000, mtime=1475113503, ctime=1478361024.943988000, birthtime=1475113503, size=3519, blksize=32768, blocks=8, flags=0x0 }
  1513. 36595 syslogd RET fstat 0
  1514. 36595 syslogd CALL read(0xa,0x801089800,0xa1e8)
  1515. 36595 syslogd GIO fd 10 read 3519 bytes
  1516. 0x0000 545a 6966 3200 0000 0000 0000 0000 0000 0000 0000 0000 0004 0000 0004 0000 0000 0000 00eb 0000 0004 0000 |TZif2.....................................|
  1517. 0x002a 0010 9ea6 1e70 9fba eb60 a086 0070 a19a cd60 a265 e270 a383 e9e0 a46a ae70 a535 a760 a653 caf0 a715 8960 |.....p...`...p...`.e.p.....j.p.5.`.S.....`|
  1518. 0x0054 a833 acf0 a8fe a5e0 aa13 8ef0 aade 87e0 abf3 70f0 acbe 69e0 add3 52f0 ae9e 4be0 afb3 34f0 b07e 2de0 b19c |.3................p...i...R...K...4..~-...|
  1519. 0x007e 5170 b267 4a60 b37c 3370 b447 2c60 b55c 1570 b627 0e60 b73b f770 b806 f060 b91b d970 b9e6 d260 bb04 f5f0 |Qp.gJ`.|3p.G,`.\.p.'.`.;.p...`...p...`....|
  1520. 0x00a8 bbc6 b460 bce4 d7f0 bdaf d0e0 bec4 b9f0 bf8f b2e0 c0a4 9bf0 c16f 94e0 c284 7df0 c34f 76e0 c464 5ff0 c52f |...`.....................o....}..Ov..d_../|
  1521. 0x00d2 58e0 c64d 7c70 c70f 3ae0 c82d 5e70 c8f8 5760 ca0d 4070 cad8 3960 cb88 f070 d223 f470 d260 fbe0 d375 e4f0 |X..M|p..:..-^p..W`[email protected]`...p.#.p.`...u..|
  1522. 0x00fc d440 dde0 d555 c6f0 d620 bfe0 d735 a8f0 d800 a1e0 d915 8af0 d9e0 83e0 dafe a770 dbc0 65e0 dcde 8970 dda9 |[email protected]... ...5.................p..e....p..|
  1523. 0x0126 8260 debe 6b70 df89 6460 e09e 4d70 e169 4660 e27e 2f70 e349 2860 e45e 1170 e557 2ee0 e647 2df0 e737 10e0 |.`..kp..d`..Mp.iF`.~/p.I(`.^.p.W...G-..7..|
  1524. 0x0150 e827 0ff0 e916 f2e0 ea06 f1f0 eaf6 d4e0 ebe6 d3f0 ecd6 b6e0 edc6 b5f0 eebf d360 efaf d270 f09f b560 f18f |.'.............................`...p...`..|
  1525. 0x017a b470 f27f 9760 f36f 9670 f45f 7960 f54f 7870 f63f 5b60 f72f 5a70 f828 77e0 f90f 3c70 fa08 59e0 faf8 58f0 |.p...`.o.p._y`.Oxp.?[`./Zp.(w...<p..Y...X.|
  1526. 0x01a4 fbe8 3be0 fcd8 3af0 fdc8 1de0 feb8 1cf0 ffa7 ffe0 0097 fef0 0187 e1e0 0277 e0f0 0370 fe60 0460 fd70 0550 |..;...:......................w...p.`.`.p.P|
  1527. 0x01ce e060 0640 df70 0730 c260 078d 1970 0910 a460 09ad 94f0 0af0 8660 0be0 8570 0cd9 a2e0 0dc0 6770 0eb9 84e0 |.`[email protected].`...p...`.......`...p......gp....|
  1528. 0x01f8 0fa9 83f0 1099 66e0 1189 65f0 1279 48e0 1369 47f0 1459 2ae0 1549 29f0 1639 0ce0 1729 0bf0 1822 2960 1908 |......f...e..yH..iG..Y*..I)..9...)...")`..|
  1529. 0x0222 edf0 1a02 0b60 1af2 0a70 1be1 ed60 1cd1 ec70 1dc1 cf60 1eb1 ce70 1fa1 b160 2076 00f0 2181 9360 2255 e2f0 |.....`...p...`...p...`...p...` v..!..`"U..|
  1530. 0x024c 236a afe0 2435 c4f0 254a 91e0 2615 a6f0 272a 73e0 27fe c370 290a 55e0 29de a570 2aea 37e0 2bbe 8770 2cd3 |#j..$5..%J..&...'*s.'..p).U.)..p*.7.+..p,.|
  1531. 0x0276 5460 2d9e 6970 2eb3 3660 2f7e 4b70 3093 1860 3167 67f0 3272 fa60 3347 49f0 3452 dc60 3527 2bf0 3632 be60 |T`-.ip..6`/~Kp0..`1gg.2r.`3GI.4R.`5'+.62.`|
  1532. 0x02a0 3707 0df0 381b dae0 38e6 eff0 39fb bce0 3ac6 d1f0 3bdb 9ee0 3caf ee70 3dbb 80e0 3e8f d070 3f9b 62e0 406f |7...8...8...9...:...;...<..p=...>..p?.b.@o|
  1533. 0x02ca b270 4184 7f60 424f 9470 4364 6160 442f 7670 4544 4360 45f3 a8f0 472d 5fe0 47d3 8af0 490d 41e0 49b3 6cf0 |.pA..`BO.pCda`D/vpEDC`E...G-_.G...I.A.I.l.|
  1534. 0x02f4 4aed 23e0 4b9c 8970 4cd6 4060 4d7c 6b70 4eb6 2260 4f5c 4d70 5096 0460 513c 2f70 5275 e660 531c 1170 5455 |J.#.K..pL.@`M|kpN."`O\MpP..`Q</pRu.`S..pTU|
  1535. 0x031e c860 54fb f370 5635 aa60 56e5 0ff0 581e c6e0 58c4 f1f0 59fe a8e0 5aa4 d3f0 5bde 8ae0 5c84 b5f0 5dbe 6ce0 |.`T..pV5.`V...X...X...Y...Z...[...\...].l.|
  1536. 0x0348 5e64 97f0 5f9e 4ee0 604d b470 6187 6b60 622d 9670 6367 4d60 640d 7870 6547 2f60 65ed 5a70 6727 1160 67cd |^d.._.N.`M.pa.k`b-.pcgM`d.xpeG/`e.Zpg'.`g.|
  1537. 0x0372 3c70 6906 f360 69ad 1e70 6ae6 d560 6b96 3af0 6ccf f1e0 6d76 1cf0 6eaf d3e0 6f55 fef0 708f b5e0 7135 e0f0 |<pi..`i..pj..`k.:.l...mv..n...oU..p...q5..|
  1538. 0x039c 726f 97e0 7315 c2f0 744f 79e0 74fe df70 7638 9660 76de c170 7818 7860 78be a370 79f8 5a60 7a9e 8570 7bd8 |ro..s...tOy.t..pv8.`v..px.x`x..py.Z`z..p{.|
  1539. 0x03c6 3c60 7c7e 6770 7db8 1e60 7e5e 4970 7f98 0060 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 |<`|~gp}..`~^Ip...`........................|
  1540. 0x03f0 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0001 0203 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1541. 0x041a 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1542. 0x0444 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1543. 0x046e 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1544. 0x0498 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 0100 |..........................................|
  1545. 0x04c2 01ff ffc7 c001 00ff ffb9 b000 04ff ffc7 c001 08ff ffc7 c001 0c45 4454 0045 5354 0045 5754 0045 5054 0000 |.........................EDT.EST.EWT.EPT..|
  1546. 0x04ec 0000 0100 0000 0154 5a69 6632 0000 0000 0000 0000 0000 0000 0000 0000 0000 0500 0000 0500 0000 0000 0000 |.......TZif2..............................|
  1547. 0x0516 ec00 0000 0500 0000 14ff ffff ff5e 03f0 90ff ffff ff9e a61e 70ff ffff ff9f baeb 60ff ffff ffa0 8600 70ff |.............^..........p.......`.......p.|
  1548. 0x0540 ffff ffa1 9acd 60ff ffff ffa2 65e2 70ff ffff ffa3 83e9 e0ff ffff ffa4 6aae 70ff ffff ffa5 35a7 60ff ffff |......`.....e.p.............j.p.....5.`...|
  1549. 0x056a ffa6 53ca f0ff ffff ffa7 1589 60ff ffff ffa8 33ac f0ff ffff ffa8 fea5 e0ff ffff ffaa 138e f0ff ffff ffaa |..S.........`.....3.......................|
  1550. 0x0594 de87 e0ff ffff ffab f370 f0ff ffff ffac be69 e0ff ffff ffad d352 f0ff ffff ffae 9e4b e0ff ffff ffaf b334 |.........p.......i.......R.......K.......4|
  1551. 0x05be f0ff ffff ffb0 7e2d e0ff ffff ffb1 9c51 70ff ffff ffb2 674a 60ff ffff ffb3 7c33 70ff ffff ffb4 472c 60ff |......~-.......Qp.....gJ`.....|3p.....G,`.|
  1552. 0x05e8 ffff ffb5 5c15 70ff ffff ffb6 270e 60ff ffff ffb7 3bf7 70ff ffff ffb8 06f0 60ff ffff ffb9 1bd9 70ff ffff |....\.p.....'.`.....;.p.......`.......p...|
  1553. 0x0612 ffb9 e6d2 60ff ffff ffbb 04f5 f0ff ffff ffbb c6b4 60ff ffff ffbc e4d7 f0ff ffff ffbd afd0 e0ff ffff ffbe |....`...............`.....................|
  1554. 0x063c c4b9 f0ff ffff ffbf 8fb2 e0ff ffff ffc0 a49b f0ff ffff ffc1 6f94 e0ff ffff ffc2 847d f0ff ffff ffc3 4f76 |........................o........}......Ov|
  1555. 0x0666 e0ff ffff ffc4 645f f0ff ffff ffc5 2f58 e0ff ffff ffc6 4d7c 70ff ffff ffc7 0f3a e0ff ffff ffc8 2d5e 70ff |......d_....../X......M|p......:......-^p.|
  1556. 0x0690 ffff ffc8 f857 60ff ffff ffca 0d40 70ff ffff ffca d839 60ff ffff ffcb 88f0 70ff ffff ffd2 23f4 70ff ffff |.....W`[email protected]`.......p.....#.p...|
  1557. 0x06ba ffd2 60fb e0ff ffff ffd3 75e4 f0ff ffff ffd4 40dd e0ff ffff ffd5 55c6 f0ff ffff ffd6 20bf e0ff ffff ffd7 |..`[email protected]....... .......|
  1558. 0x06e4 35a8 f0ff ffff ffd8 00a1 e0ff ffff ffd9 158a f0ff ffff ffd9 e083 e0ff ffff ffda fea7 70ff ffff ffdb c065 |5.................................p......e|
  1559. 0x070e e0ff ffff ffdc de89 70ff ffff ffdd a982 60ff ffff ffde be6b 70ff ffff ffdf 8964 60ff ffff ffe0 9e4d 70ff |........p.......`......kp......d`......Mp.|
  1560. 0x0738 ffff ffe1 6946 60ff ffff ffe2 7e2f 70ff ffff ffe3 4928 60ff ffff ffe4 5e11 70ff ffff ffe5 572e e0ff ffff |....iF`.....~/p.....I(`.....^.p.....W.....|
  1561. 0x0762 ffe6 472d f0ff ffff ffe7 3710 e0ff ffff ffe8 270f f0ff ffff ffe9 16f2 e0ff ffff ffea 06f1 f0ff ffff ffea |..G-......7.......'.......................|
  1562. 0x078c f6d4 e0ff ffff ffeb e6d3 f0ff ffff ffec d6b6 e0ff ffff ffed c6b5 f0ff ffff ffee bfd3 60ff ffff ffef afd2 |..................................`.......|
  1563. 0x07b6 70ff ffff fff0 9fb5 60ff ffff fff1 8fb4 70ff ffff fff2 7f97 60ff ffff fff3 6f96 70ff ffff fff4 5f79 60ff |p.......`.......p.......`.....o.p....._y`.|
  1564. 0x07e0 ffff fff5 4f78 70ff ffff fff6 3f5b 60ff ffff fff7 2f5a 70ff ffff fff8 2877 e0ff ffff fff9 0f3c 70ff ffff |....Oxp.....?[`...../Zp.....(w.......<p...|
  1565. 0x080a fffa 0859 e0ff ffff fffa f858 f0ff ffff fffb e83b e0ff ffff fffc d83a f0ff ffff fffd c81d e0ff ffff fffe |...Y.......X.......;.......:..............|
  1566. 0x0834 b81c f0ff ffff ffff a7ff e000 0000 0000 97fe f000 0000 0001 87e1 e000 0000 0002 77e0 f000 0000 0003 70fe |................................w.......p.|
  1567. 0x085e 6000 0000 0004 60fd 7000 0000 0005 50e0 6000 0000 0006 40df 7000 0000 0007 30c2 6000 0000 0007 8d19 7000 |`.....`.p.....P.`[email protected].`.......p.|
  1568. 0x0888 0000 0009 10a4 6000 0000 0009 ad94 f000 0000 000a f086 6000 0000 000b e085 7000 0000 000c d9a2 e000 0000 |......`...............`.......p...........|
  1569. 0x08b2 000d c067 7000 0000 000e b984 e000 0000 000f a983 f000 0000 0010 9966 e000 0000 0011 8965 f000 0000 0012 |...gp......................f.......e......|
  1570. 0x08dc 7948 e000 0000 0013 6947 f000 0000 0014 592a e000 0000 0015 4929 f000 0000 0016 390c e000 0000 0017 290b |yH......iG......Y*......I)......9.......).|
  1571. 0x0906 f000 0000 0018 2229 6000 0000 0019 08ed f000 0000 001a 020b 6000 0000 001a f20a 7000 0000 001b e1ed 6000 |......")`...............`.......p.......`.|
  1572. 0x0930 0000 001c d1ec 7000 0000 001d c1cf 6000 0000 001e b1ce 7000 0000 001f a1b1 6000 0000 0020 7600 f000 0000 |......p.......`.......p.......`.... v.....|
  1573. 0x095a 0021 8193 6000 0000 0022 55e2 f000 0000 0023 6aaf e000 0000 0024 35c4 f000 0000 0025 4a91 e000 0000 0026 |.!..`...."U......#j......$5......%J......&|
  1574. 0x0984 15a6 f000 0000 0027 2a73 e000 0000 0027 fec3 7000 0000 0029 0a55 e000 0000 0029 dea5 7000 0000 002a ea37 |.......'*s.....'..p....).U.....)..p....*.7|
  1575. 0x09ae e000 0000 002b be87 7000 0000 002c d354 6000 0000 002d 9e69 7000 0000 002e b336 6000 0000 002f 7e4b 7000 |.....+..p....,.T`....-.ip......6`..../~Kp.|
  1576. 0x09d8 0000 0030 9318 6000 0000 0031 6767 f000 0000 0032 72fa 6000 0000 0033 4749 f000 0000 0034 52dc 6000 0000 |...0..`....1gg.....2r.`....3GI.....4R.`...|
  1577. 0x0a02 0035 272b f000 0000 0036 32be 6000 0000 0037 070d f000 0000 0038 1bda e000 0000 0038 e6ef f000 0000 0039 |.5'+.....62.`....7.......8.......8.......9|
  1578. 0x0a2c fbbc e000 0000 003a c6d1 f000 0000 003b db9e e000 0000 003c afee 7000 0000 003d bb80 e000 0000 003e 8fd0 |.......:.......;.......<..p....=.......>..|
  1579. 0x0a56 7000 0000 003f 9b62 e000 0000 0040 6fb2 7000 0000 0041 847f 6000 0000 0042 4f94 7000 0000 0043 6461 6000 |[email protected]..`....BO.p....Cda`.|
  1580. 0x0a80 0000 0044 2f76 7000 0000 0045 4443 6000 0000 0045 f3a8 f000 0000 0047 2d5f e000 0000 0047 d38a f000 0000 |...D/vp....EDC`....E.......G-_.....G......|
  1581. 0x0aaa 0049 0d41 e000 0000 0049 b36c f000 0000 004a ed23 e000 0000 004b 9c89 7000 0000 004c d640 6000 0000 004d |.I.A.....I.l.....J.#.....K..p....L.@`....M|
  1582. 0x0ad4 7c6b 7000 0000 004e b622 6000 0000 004f 5c4d 7000 0000 0050 9604 6000 0000 0051 3c2f 7000 0000 0052 75e6 ||kp....N."`....O\Mp....P..`....Q</p....Ru.|
  1583. 0x0afe 6000 0000 0053 1c11 7000 0000 0054 55c8 6000 0000 0054 fbf3 7000 0000 0056 35aa 6000 0000 0056 e50f f000 |`....S..p....TU.`....T..p....V5.`....V....|
  1584. 0x0b28 0000 0058 1ec6 e000 0000 0058 c4f1 f000 0000 0059 fea8 e000 0000 005a a4d3 f000 0000 005b de8a e000 0000 |...X.......X.......Y.......Z.......[......|
  1585. 0x0b52 005c 84b5 f000 0000 005d be6c e000 0000 005e 6497 f000 0000 005f 9e4e e000 0000 0060 4db4 7000 0000 0061 |.\.......].l.....^d......_.N.....`M.p....a|
  1586. 0x0b7c 876b 6000 0000 0062 2d96 7000 0000 0063 674d 6000 0000 0064 0d78 7000 0000 0065 472f 6000 0000 0065 ed5a |.k`....b-.p....cgM`....d.xp....eG/`....e.Z|
  1587. 0x0ba6 7000 0000 0067 2711 6000 0000 0067 cd3c 7000 0000 0069 06f3 6000 0000 0069 ad1e 7000 0000 006a e6d5 6000 |p....g'.`....g.<p....i..`....i..p....j..`.|
  1588. 0x0bd0 0000 006b 963a f000 0000 006c cff1 e000 0000 006d 761c f000 0000 006e afd3 e000 0000 006f 55fe f000 0000 |...k.:.....l.......mv......n.......oU.....|
  1589. 0x0bfa 0070 8fb5 e000 0000 0071 35e0 f000 0000 0072 6f97 e000 0000 0073 15c2 f000 0000 0074 4f79 e000 0000 0074 |.p.......q5......ro......s.......tOy.....t|
  1590. 0x0c24 fedf 7000 0000 0076 3896 6000 0000 0076 dec1 7000 0000 0078 1878 6000 0000 0078 bea3 7000 0000 0079 f85a |..p....v8.`....v..p....x.x`....x..p....y.Z|
  1591. 0x0c4e 6000 0000 007a 9e85 7000 0000 007b d83c 6000 0000 007c 7e67 7000 0000 007d b81e 6000 0000 007e 5e49 7000 |`....z..p....{.<`....|~gp....}..`....~^Ip.|
  1592. 0x0c78 0000 007f 9800 6002 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 0102 |......`...................................|
  1593. 0x0ca2 0102 0102 0102 0102 0102 0102 0102 0304 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 |..........................................|
  1594. 0x0ccc 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 |..........................................|
  1595. 0x0cf6 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 |..........................................|
  1596. 0x0d20 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 |..........................................|
  1597. 0x0d4a 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 0201 02ff ffba 9e00 00ff ffc7 |..........................................|
  1598. 0x0d74 c001 04ff ffb9 b000 08ff ffc7 c001 0cff ffc7 c001 104c 4d54 0045 4454 0045 5354 0045 5754 0045 5054 0000 |.....................LMT.EDT.EST.EWT.EPT..|
  1599. 0x0d9e 0000 0001 0000 0000 010a 4553 5435 4544 542c 4d33 2e32 2e30 2c4d 3131 2e31 2e30 0a |..........EST5EDT,M3.2.0,M11.1.0.|
  1600.  
  1601. 36595 syslogd RET read 3519/0xdbf
  1602. 36595 syslogd CALL close(0xa)
  1603. 36595 syslogd RET close 0
  1604. 36595 syslogd CALL openat(AT_FDCWD,0x408828,0x5<O_WRONLY|O_NONBLOCK>)
  1605. 36595 syslogd NAMI "/dev/console"
  1606. 36595 syslogd RET openat 10/0xa
  1607. 36595 syslogd CALL write(0x1,0x80101b000,0x20)
  1608. 36595 syslogd GIO fd 1 wrote 32 bytes
  1609. "Logging to CONSOLE /dev/console
  1610. "
  1611. 36595 syslogd RET write 32/0x20
  1612. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffa680,0x5<O_WRONLY|O_NONBLOCK>)
  1613. 36595 syslogd NAMI "/dev/console"
  1614. 36595 syslogd RET openat 11/0xb
  1615. 36595 syslogd CALL writev(0xb,0x7fffffffad90,0x7)
  1616. 36595 syslogd GIO fd 11 wrote 65 bytes
  1617. "Dec 16 15:24:13 syslogd: /dev/console: Interrupted system call\r
  1618. "
  1619. 36595 syslogd RET writev 65/0x41
  1620. 36595 syslogd CALL close(0xb)
  1621. 36595 syslogd RET close 0
  1622. 36595 syslogd CALL close(0xa)
  1623. 36595 syslogd RET close 0
  1624. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffae30,0x7fffffffae20)
  1625. 36595 syslogd RET sigprocmask 0
  1626. 36595 syslogd CALL write(0x1,0x80101b000,0x7f)
  1627. 36595 syslogd GIO fd 1 wrote 127 bytes
  1628. "cfline("*.notice;authpriv.none;kern.debug;lpr.info;mail.crit;news.err;local0.none;local1.none /var/log/messages", f, "*", "*")
  1629. "
  1630. 36595 syslogd RET write 127/0x7f
  1631. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc896,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1632. 36595 syslogd NAMI "/var/log/messages"
  1633. 36595 syslogd RET openat 10/0xa
  1634. 36595 syslogd CALL ioctl(0xa,TIOCGETA,0x7fffffffb5d0)
  1635. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1636. 36595 syslogd CALL write(0x1,0x80101b000,0x39)
  1637. 36595 syslogd GIO fd 1 wrote 57 bytes
  1638. "cfline("security.* /var/log/security", f, "*", "*")
  1639. "
  1640. 36595 syslogd RET write 57/0x39
  1641. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc850,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1642. 36595 syslogd NAMI "/var/log/security"
  1643. 36595 syslogd RET openat 11/0xb
  1644. 36595 syslogd CALL ioctl(0xb,TIOCGETA,0x7fffffffb5d0)
  1645. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1646. 36595 syslogd CALL write(0x1,0x80101b000,0x45)
  1647. 36595 syslogd GIO fd 1 wrote 69 bytes
  1648. "cfline("auth.info;authpriv.info /var/log/auth.log", f, "*", "*")
  1649. "
  1650. 36595 syslogd RET write 69/0x45
  1651. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc85c,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1652. 36595 syslogd NAMI "/var/log/auth.log"
  1653. 36595 syslogd RET openat 12/0xc
  1654. 36595 syslogd CALL ioctl(0xc,TIOCGETA,0x7fffffffb5d0)
  1655. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1656. 36595 syslogd CALL write(0x1,0x80101b000,0x37)
  1657. 36595 syslogd GIO fd 1 wrote 55 bytes
  1658. "cfline("mail.info /var/log/maillog", f, "*", "*")
  1659. "
  1660. 36595 syslogd RET write 55/0x37
  1661. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc84f,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1662. 36595 syslogd NAMI "/var/log/maillog"
  1663. 36595 syslogd RET openat 13/0xd
  1664. 36595 syslogd CALL ioctl(0xd,TIOCGETA,0x7fffffffb5d0)
  1665. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1666. 36595 syslogd CALL write(0x1,0x80101b000,0x36)
  1667. 36595 syslogd GIO fd 1 wrote 54 bytes
  1668. "cfline("ftp.info /var/log/xferlog", f, "*", "*")
  1669. "
  1670. 36595 syslogd RET write 54/0x36
  1671. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc84e,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1672. 36595 syslogd NAMI "/var/log/xferlog"
  1673. 36595 syslogd RET openat 14/0xe
  1674. 36595 syslogd CALL ioctl(0xe,TIOCGETA,0x7fffffffb5d0)
  1675. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1676. 36595 syslogd CALL write(0x1,0x80101b000,0x32)
  1677. 36595 syslogd GIO fd 1 wrote 50 bytes
  1678. "cfline("cron.* /var/log/cron", f, "*", "*")
  1679. "
  1680. 36595 syslogd RET write 50/0x32
  1681. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc84d,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1682. 36595 syslogd NAMI "/var/log/cron"
  1683. 36595 syslogd RET openat 15/0xf
  1684. 36595 syslogd CALL ioctl(0xf,TIOCGETA,0x7fffffffb5d0)
  1685. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1686. 36595 syslogd CALL write(0x1,0x80101b000,0x33)
  1687. 36595 syslogd GIO fd 1 wrote 51 bytes
  1688. "cfline("*.* -/var/log/ipfw", f, "ipfw", "*")
  1689. "
  1690. 36595 syslogd RET write 51/0x33
  1691. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc84b,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1692. 36595 syslogd NAMI "/var/log/ipfw"
  1693. 36595 syslogd RET openat 16/0x10
  1694. 36595 syslogd CALL ioctl(0x10,TIOCGETA,0x7fffffffb5d0)
  1695. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1696. 36595 syslogd CALL write(0x1,0x80101b000,0x3c)
  1697. 36595 syslogd GIO fd 1 wrote 60 bytes
  1698. "cfline("*.=debug /var/log/debug.log", f, "-devd", "*")
  1699. "
  1700. 36595 syslogd RET write 60/0x3c
  1701. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc84e,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1702. 36595 syslogd NAMI "/var/log/debug.log"
  1703. 36595 syslogd RET openat 17/0x11
  1704. 36595 syslogd CALL ioctl(0x11,TIOCGETA,0x7fffffffb5d0)
  1705. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1706. 36595 syslogd CALL write(0x1,0x80101b000,0x2b)
  1707. 36595 syslogd GIO fd 1 wrote 43 bytes
  1708. "cfline("*.emerg *", f, "-devd", "*")
  1709. "
  1710. 36595 syslogd RET write 43/0x2b
  1711. 36595 syslogd CALL write(0x1,0x80101b000,0x3a)
  1712. 36595 syslogd GIO fd 1 wrote 58 bytes
  1713. "cfline("local0.* /var/log/mikrotik.log", f, "-devd", "*")
  1714. "
  1715. 36595 syslogd RET write 58/0x3a
  1716. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc849,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1717. 36595 syslogd NAMI "/var/log/mikrotik.log"
  1718. 36595 syslogd RET openat 18/0x12
  1719. 36595 syslogd CALL ioctl(0x12,TIOCGETA,0x7fffffffb5d0)
  1720. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1721. 36595 syslogd CALL write(0x1,0x80101b000,0x3c)
  1722. 36595 syslogd GIO fd 1 wrote 60 bytes
  1723. "cfline("local1.* /var/log/nrpe2.log", f, "-devd", "*")
  1724. "
  1725. 36595 syslogd RET write 60/0x3c
  1726. 36595 syslogd CALL openat(AT_FDCWD,0x7fffffffc84e,0x209<O_WRONLY|O_APPEND|O_CREAT>,0600<S_IRUSR|S_IWUSR>)
  1727. 36595 syslogd NAMI "/var/log/nrpe2.log"
  1728. 36595 syslogd RET openat 19/0x13
  1729. 36595 syslogd CALL ioctl(0x13,TIOCGETA,0x7fffffffb5d0)
  1730. 36595 syslogd RET ioctl -1 errno 25 Inappropriate ioctl for device
  1731. 36595 syslogd CALL read(0x9,0x80103c640,0x8000)
  1732. 36595 syslogd GIO fd 9 read 0 bytes
  1733. ""
  1734. 36595 syslogd RET read 0
  1735. 36595 syslogd CALL close(0x9)
  1736. 36595 syslogd RET close 0
  1737. 36595 syslogd CALL write(0x1,0x80101b000,0x3b)
  1738. 36595 syslogd GIO fd 1 wrote 59 bytes
  1739. "4 3 2 3 5 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 3 X UNUSED:
  1740. "
  1741. 36595 syslogd RET write 59/0x3b
  1742. 36595 syslogd CALL write(0x1,0x80101b000,0x4a)
  1743. 36595 syslogd GIO fd 1 wrote 74 bytes
  1744. "7 5 2 5 5 5 6 3 5 5 X 5 5 5 5 5 X X 5 5 5 5 5 5 X FILE: /var/log/messages
  1745. "
  1746. 36595 syslogd RET write 74/0x4a
  1747. 36595 syslogd CALL write(0x1,0x80101b000,0x4a)
  1748. 36595 syslogd GIO fd 1 wrote 74 bytes
  1749. "X X X X X X X X X X X X X 7 X X X X X X X X X X X FILE: /var/log/security
  1750. "
  1751. 36595 syslogd RET write 74/0x4a
  1752. 36595 syslogd CALL write(0x1,0x80101b000,0x4a)
  1753. 36595 syslogd GIO fd 1 wrote 74 bytes
  1754. "X X X X 6 X X X X X 6 X X X X X X X X X X X X X X FILE: /var/log/auth.log
  1755. "
  1756. 36595 syslogd RET write 74/0x4a
  1757. 36595 syslogd CALL write(0x1,0x80101b000,0x49)
  1758. 36595 syslogd GIO fd 1 wrote 73 bytes
  1759. "X X 6 X X X X X X X X X X X X X X X X X X X X X X FILE: /var/log/maillog
  1760. "
  1761. 36595 syslogd RET write 73/0x49
  1762. 36595 syslogd CALL write(0x1,0x80101b000,0x49)
  1763. 36595 syslogd GIO fd 1 wrote 73 bytes
  1764. "X X X X X X X X X X X 6 X X X X X X X X X X X X X FILE: /var/log/xferlog
  1765. "
  1766. 36595 syslogd RET write 73/0x49
  1767. 36595 syslogd CALL write(0x1,0x80101b000,0x46)
  1768. 36595 syslogd GIO fd 1 wrote 70 bytes
  1769. "X X X X X X X X X 7 X X X X X X X X X X X X X X X FILE: /var/log/cron
  1770. "
  1771. 36595 syslogd RET write 70/0x46
  1772. 36595 syslogd CALL write(0x1,0x80101b000,0x4d)
  1773. 36595 syslogd GIO fd 1 wrote 77 bytes
  1774. "7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 X FILE: /var/log/ipfw (ipfw)
  1775. "
  1776. 36595 syslogd RET write 77/0x4d
  1777. 36595 syslogd CALL write(0x1,0x80101b000,0x53)
  1778. 36595 syslogd GIO fd 1 wrote 83 bytes
  1779. "7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 7 X FILE: /var/log/debug.log (-devd)
  1780. "
  1781. 36595 syslogd RET write 83/0x53
  1782. 36595 syslogd CALL write(0x1,0x80101b000,0x41)
  1783. 36595 syslogd GIO fd 1 wrote 65 bytes
  1784. "0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 X WALL: (-devd)
  1785. "
  1786. 36595 syslogd RET write 65/0x41
  1787. 36595 syslogd CALL write(0x1,0x80101b000,0x56)
  1788. 36595 syslogd GIO fd 1 wrote 86 bytes
  1789. "X X X X X X X X X X X X X X X X 7 X X X X X X X X FILE: /var/log/mikrotik.log (-devd)
  1790. "
  1791. 36595 syslogd RET write 86/0x56
  1792. 36595 syslogd CALL write(0x1,0x80101b000,0x53)
  1793. 36595 syslogd GIO fd 1 wrote 83 bytes
  1794. "X X X X X X X X X X X X X X X X X 7 X X X X X X X FILE: /var/log/nrpe2.log (-devd)
  1795. "
  1796. 36595 syslogd RET write 83/0x53
  1797. 36595 syslogd CALL write(0x1,0x80101b000,0x3c)
  1798. 36595 syslogd GIO fd 1 wrote 60 bytes
  1799. "logmsg: pri 56, flags 4, from bsd-ap2, msg syslogd: restart
  1800. "
  1801. 36595 syslogd RET write 60/0x3c
  1802. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffcab0,0x7fffffffcaa0)
  1803. 36595 syslogd RET sigprocmask 0
  1804. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffcab0,0x7fffffffcaa0)
  1805. 36595 syslogd RET sigprocmask 0
  1806. 36595 syslogd CALL write(0x1,0x80101b000,0x13)
  1807. 36595 syslogd GIO fd 1 wrote 19 bytes
  1808. "syslogd: restarted
  1809. "
  1810. 36595 syslogd RET write 19/0x13
  1811. 36595 syslogd CALL write(0x1,0x80101b000,0x5b)
  1812. 36595 syslogd GIO fd 1 wrote 91 bytes
  1813. "logmsg: pri 6, flags 4, from bsd-ap2, msg syslogd: kernel boot file is /boot/kernel/kernel
  1814. "
  1815. 36595 syslogd RET write 91/0x5b
  1816. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffcab0,0x7fffffffcaa0)
  1817. 36595 syslogd RET sigprocmask 0
  1818. 36595 syslogd CALL write(0x1,0x80101b000,0x22)
  1819. 36595 syslogd GIO fd 1 wrote 34 bytes
  1820. "Logging to FILE /var/log/messages
  1821. "
  1822. 36595 syslogd RET write 34/0x22
  1823. 36595 syslogd CALL writev(0xa,0x7fffffffca10,0x7)
  1824. 36595 syslogd GIO fd 10 wrote 73 bytes
  1825. "Dec 16 15:24:13 bsd-ap2 syslogd: kernel boot file is /boot/kernel/kernel
  1826. "
  1827. 36595 syslogd RET writev 73/0x49
  1828. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffcab0,0x7fffffffcaa0)
  1829. 36595 syslogd RET sigprocmask 0
  1830. 36595 syslogd CALL write(0x1,0x80101b000,0x31)
  1831. 36595 syslogd GIO fd 1 wrote 49 bytes
  1832. "syslogd: kernel boot file is /boot/kernel/kernel
  1833. "
  1834. 36595 syslogd RET write 49/0x31
  1835. 36595 syslogd CALL sigaction(SIGHUP,0x7fffffffea00,0)
  1836. 36595 syslogd RET sigaction 0
  1837. 36595 syslogd CALL setitimer(0,0x7fffffffdbb0,0x7fffffffdb90)
  1838. 36595 syslogd STRU itimerval { .interval = {0, 0}, .value = {30, 0} }
  1839. 36595 syslogd STRU itimerval { .interval = {0, 0}, .value = {0, 0} }
  1840. 36595 syslogd RET setitimer 0
  1841. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  1842. 36595 syslogd RET select 3
  1843. 36595 syslogd CALL read(0x8,0x7fffffffe080,0x3ff)
  1844. 36595 syslogd GIO fd 8 read 220 bytes
  1845. "<118>Dec 16 15:23:20 <kern.emerg> syslogd: /dev/console: Interrupted system call
  1846. <118>Dec 16 15:23:39 syslogd: /dev/console: Interrupted system call
  1847. <118>Dec 16 15:24:13 syslogd: /dev/console: Interrupted system call
  1848. "
  1849. 36595 syslogd RET read 220/0xdc
  1850. 36595 syslogd CALL write(0x1,0x80101b000,0x7a)
  1851. 36595 syslogd GIO fd 1 wrote 122 bytes
  1852. "logmsg: pri 166, flags 17, from bsd-ap2, msg Dec 16 15:23:20 <kern.emerg> syslogd: /dev/console: Interrupted system call
  1853. "
  1854. 36595 syslogd RET write 122/0x7a
  1855. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd620,0x7fffffffd610)
  1856. 36595 syslogd RET sigprocmask 0
  1857. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd620,0x7fffffffd610)
  1858. 36595 syslogd RET sigprocmask 0
  1859. 36595 syslogd CALL write(0x1,0x80101b000,0x6d)
  1860. 36595 syslogd GIO fd 1 wrote 109 bytes
  1861. "logmsg: pri 166, flags 17, from bsd-ap2, msg Dec 16 15:23:39 syslogd: /dev/console: Interrupted system call
  1862. "
  1863. 36595 syslogd RET write 109/0x6d
  1864. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd620,0x7fffffffd610)
  1865. 36595 syslogd RET sigprocmask 0
  1866. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd620,0x7fffffffd610)
  1867. 36595 syslogd RET sigprocmask 0
  1868. 36595 syslogd CALL write(0x1,0x80101b000,0x6d)
  1869. 36595 syslogd GIO fd 1 wrote 109 bytes
  1870. "logmsg: pri 166, flags 17, from bsd-ap2, msg Dec 16 15:24:13 syslogd: /dev/console: Interrupted system call
  1871. "
  1872. 36595 syslogd RET write 109/0x6d
  1873. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd620,0x7fffffffd610)
  1874. 36595 syslogd RET sigprocmask 0
  1875. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd620,0x7fffffffd610)
  1876. 36595 syslogd RET sigprocmask 0
  1877. 36595 syslogd CALL read(0x8,0x7fffffffe080,0x3ff)
  1878. 36595 syslogd RET read -1 errno 35 Resource temporarily unavailable
  1879. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  1880. 36595 syslogd GIO fd 4 read 70 bytes
  1881. "<143>Dec 16 15:24:00 nrpe[43668]: Connection from 127.0.0.1 port 20614"
  1882. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  1883. 36595 syslogd RET recvfrom 70/0x46
  1884. 36595 syslogd CALL write(0x1,0x80101b000,0x6e)
  1885. 36595 syslogd GIO fd 1 wrote 110 bytes
  1886. "logmsg: pri 217, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nrpe[43668]: Connection from 127.0.0.1 port 20614
  1887. "
  1888. 36595 syslogd RET write 110/0x6e
  1889. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  1890. 36595 syslogd RET sigprocmask 0
  1891. 36595 syslogd CALL write(0x1,0x80101b000,0x23)
  1892. 36595 syslogd GIO fd 1 wrote 35 bytes
  1893. "Logging to FILE /var/log/debug.log
  1894. "
  1895. 36595 syslogd RET write 35/0x23
  1896. 36595 syslogd CALL writev(0x11,0x7fffffffd120,0x7)
  1897. 36595 syslogd GIO fd 17 wrote 74 bytes
  1898. "Dec 16 15:24:00 bsd-ap2 nrpe[43668]: Connection from 127.0.0.1 port 20614
  1899. "
  1900. 36595 syslogd RET writev 74/0x4a
  1901. 36595 syslogd CALL write(0x1,0x80101b000,0x23)
  1902. 36595 syslogd GIO fd 1 wrote 35 bytes
  1903. "Logging to FILE /var/log/nrpe2.log
  1904. "
  1905. 36595 syslogd RET write 35/0x23
  1906. 36595 syslogd CALL writev(0x13,0x7fffffffd120,0x7)
  1907. 36595 syslogd GIO fd 19 wrote 74 bytes
  1908. "Dec 16 15:24:00 bsd-ap2 nrpe[43668]: Connection from 127.0.0.1 port 20614
  1909. "
  1910. 36595 syslogd RET writev 74/0x4a
  1911. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  1912. 36595 syslogd RET sigprocmask 0
  1913. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  1914. 36595 syslogd GIO fd 5 read 117 bytes
  1915. "<78>Dec 16 15:24:00 /usr/sbin/cron[43600]: (root) CMD (nice -n5 /usr/home/milanc/scripts/watchmen.pl >/dev/null 2>&1)"
  1916. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  1917. 36595 syslogd RET recvfrom 117/0x75
  1918. 36595 syslogd CALL write(0x1,0x80101b000,0x9e)
  1919. 36595 syslogd GIO fd 1 wrote 158 bytes
  1920. "logmsg: pri 116, flags 0, from bsd-ap2, msg Dec 16 15:24:00 /usr/sbin/cron[43600]: (root) CMD (nice -n5 /usr/home/milanc/scripts/watchmen.pl >/dev/null 2>&1\
  1921. )
  1922. "
  1923. 36595 syslogd RET write 158/0x9e
  1924. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  1925. 36595 syslogd RET sigprocmask 0
  1926. 36595 syslogd CALL write(0x1,0x80101b000,0x1e)
  1927. 36595 syslogd GIO fd 1 wrote 30 bytes
  1928. "Logging to FILE /var/log/cron
  1929. "
  1930. 36595 syslogd RET write 30/0x1e
  1931. 36595 syslogd CALL writev(0xf,0x7fffffffd120,0x7)
  1932. 36595 syslogd GIO fd 15 wrote 122 bytes
  1933. "Dec 16 15:24:00 bsd-ap2 /usr/sbin/cron[43600]: (root) CMD (nice -n5 /usr/home/milanc/scripts/watchmen.pl >/dev/null 2>&1)
  1934. "
  1935. 36595 syslogd RET writev 122/0x7a
  1936. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  1937. 36595 syslogd RET sigprocmask 0
  1938. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  1939. 36595 syslogd RET select 2
  1940. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  1941. 36595 syslogd GIO fd 4 read 66 bytes
  1942. "<143>Dec 16 15:24:00 nrpe[43668]: Host address is in allowed_hosts"
  1943. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  1944. 36595 syslogd RET recvfrom 66/0x42
  1945. 36595 syslogd CALL write(0x1,0x80101b000,0x6a)
  1946. 36595 syslogd GIO fd 1 wrote 106 bytes
  1947. "logmsg: pri 217, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nrpe[43668]: Host address is in allowed_hosts
  1948. "
  1949. 36595 syslogd RET write 106/0x6a
  1950. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  1951. 36595 syslogd RET sigprocmask 0
  1952. 36595 syslogd CALL write(0x1,0x80101b000,0x23)
  1953. 36595 syslogd GIO fd 1 wrote 35 bytes
  1954. "Logging to FILE /var/log/debug.log
  1955. "
  1956. 36595 syslogd RET write 35/0x23
  1957. 36595 syslogd CALL writev(0x11,0x7fffffffd120,0x7)
  1958. 36595 syslogd GIO fd 17 wrote 70 bytes
  1959. "Dec 16 15:24:00 bsd-ap2 nrpe[43668]: Host address is in allowed_hosts
  1960. "
  1961. 36595 syslogd RET writev 70/0x46
  1962. 36595 syslogd CALL write(0x1,0x80101b000,0x23)
  1963. 36595 syslogd GIO fd 1 wrote 35 bytes
  1964. "Logging to FILE /var/log/nrpe2.log
  1965. "
  1966. 36595 syslogd RET write 35/0x23
  1967. 36595 syslogd CALL writev(0x13,0x7fffffffd120,0x7)
  1968. 36595 syslogd GIO fd 19 wrote 70 bytes
  1969. "Dec 16 15:24:00 bsd-ap2 nrpe[43668]: Host address is in allowed_hosts
  1970. "
  1971. 36595 syslogd RET writev 70/0x46
  1972. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  1973. 36595 syslogd RET sigprocmask 0
  1974. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  1975. 36595 syslogd GIO fd 5 read 85 bytes
  1976. "<38>Dec 16 15:24:00 sshd[43685]: Did not receive identification string from 127.0.0.1"
  1977. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  1978. 36595 syslogd RET recvfrom 85/0x55
  1979. 36595 syslogd CALL write(0x1,0x80101b000,0x7d)
  1980. 36595 syslogd GIO fd 1 wrote 125 bytes
  1981. "logmsg: pri 46, flags 0, from bsd-ap2, msg Dec 16 15:24:00 sshd[43685]: Did not receive identification string from 127.0.0.1
  1982. "
  1983. 36595 syslogd RET write 125/0x7d
  1984. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  1985. 36595 syslogd RET sigprocmask 0
  1986. 36595 syslogd CALL write(0x1,0x80101b000,0x22)
  1987. 36595 syslogd GIO fd 1 wrote 34 bytes
  1988. "Logging to FILE /var/log/auth.log
  1989. "
  1990. 36595 syslogd RET write 34/0x22
  1991. 36595 syslogd CALL writev(0xc,0x7fffffffd120,0x7)
  1992. 36595 syslogd GIO fd 12 wrote 90 bytes
  1993. "Dec 16 15:24:00 bsd-ap2 sshd[43685]: Did not receive identification string from 127.0.0.1
  1994. "
  1995. 36595 syslogd RET writev 90/0x5a
  1996. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  1997. 36595 syslogd RET sigprocmask 0
  1998. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  1999. 36595 syslogd RET select 2
  2000. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2001. 36595 syslogd GIO fd 4 read 60 bytes
  2002. "<143>Dec 16 15:24:00 nrpe[43668]: Handling the connection..."
  2003. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2004. 36595 syslogd RET recvfrom 60/0x3c
  2005. 36595 syslogd CALL write(0x1,0x80101b000,0x64)
  2006. 36595 syslogd GIO fd 1 wrote 100 bytes
  2007. "logmsg: pri 217, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nrpe[43668]: Handling the connection...
  2008. "
  2009. 36595 syslogd RET write 100/0x64
  2010. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2011. 36595 syslogd RET sigprocmask 0
  2012. 36595 syslogd CALL write(0x1,0x80101b000,0x23)
  2013. 36595 syslogd GIO fd 1 wrote 35 bytes
  2014. "Logging to FILE /var/log/debug.log
  2015. "
  2016. 36595 syslogd RET write 35/0x23
  2017. 36595 syslogd CALL writev(0x11,0x7fffffffd120,0x7)
  2018. 36595 syslogd GIO fd 17 wrote 64 bytes
  2019. "Dec 16 15:24:00 bsd-ap2 nrpe[43668]: Handling the connection...
  2020. "
  2021. 36595 syslogd RET writev 64/0x40
  2022. 36595 syslogd CALL write(0x1,0x80101b000,0x23)
  2023. 36595 syslogd GIO fd 1 wrote 35 bytes
  2024. "Logging to FILE /var/log/nrpe2.log
  2025. "
  2026. 36595 syslogd RET write 35/0x23
  2027. 36595 syslogd CALL writev(0x13,0x7fffffffd120,0x7)
  2028. 36595 syslogd GIO fd 19 wrote 64 bytes
  2029. "Dec 16 15:24:00 bsd-ap2 nrpe[43668]: Handling the connection...
  2030. "
  2031. 36595 syslogd RET writev 64/0x40
  2032. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2033. 36595 syslogd RET sigprocmask 0
  2034. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2035. 36595 syslogd GIO fd 5 read 131 bytes
  2036. "<30>Dec 16 15:24:00 nfcapd[2824]: Ident: 'none' Flows: 12225, Packets: 818935, Bytes: 734814895, Sequence Errors: 0, Bad Packets: 0"
  2037. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2038. 36595 syslogd RET recvfrom 131/0x83
  2039. 36595 syslogd CALL write(0x1,0x80101b000,0xab)
  2040. 36595 syslogd GIO fd 1 wrote 171 bytes
  2041. "logmsg: pri 36, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nfcapd[2824]: Ident: 'none' Flows: 12225, Packets: 818935, Bytes: 734814895, Sequence Errors: 0, \
  2042. Bad Packets: 0
  2043. "
  2044. 36595 syslogd RET write 171/0xab
  2045. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2046. 36595 syslogd RET sigprocmask 0
  2047. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2048. 36595 syslogd RET sigprocmask 0
  2049. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  2050. 36595 syslogd RET select 2
  2051. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2052. 36595 syslogd GIO fd 4 read 76 bytes
  2053. "<139>Dec 16 15:24:00 nrpe[43668]: Error: Could not complete SSL handshake. 5"
  2054. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2055. 36595 syslogd RET recvfrom 76/0x4c
  2056. 36595 syslogd CALL write(0x1,0x80101b000,0x74)
  2057. 36595 syslogd GIO fd 1 wrote 116 bytes
  2058. "logmsg: pri 213, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nrpe[43668]: Error: Could not complete SSL handshake. 5
  2059. "
  2060. 36595 syslogd RET write 116/0x74
  2061. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2062. 36595 syslogd RET sigprocmask 0
  2063. 36595 syslogd CALL write(0x1,0x80101b000,0x12)
  2064. 36595 syslogd GIO fd 1 wrote 18 bytes
  2065. "Logging to UNUSED
  2066. "
  2067. 36595 syslogd RET write 18/0x12
  2068. 36595 syslogd CALL write(0x1,0x80101b000,0x23)
  2069. 36595 syslogd GIO fd 1 wrote 35 bytes
  2070. "Logging to FILE /var/log/nrpe2.log
  2071. "
  2072. 36595 syslogd RET write 35/0x23
  2073. 36595 syslogd CALL writev(0x13,0x7fffffffd120,0x7)
  2074. 36595 syslogd GIO fd 19 wrote 80 bytes
  2075. "Dec 16 15:24:00 bsd-ap2 nrpe[43668]: Error: Could not complete SSL handshake. 5
  2076. "
  2077. 36595 syslogd RET writev 80/0x50
  2078. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2079. 36595 syslogd RET sigprocmask 0
  2080. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2081. 36595 syslogd GIO fd 5 read 49 bytes
  2082. "<30>Dec 16 15:24:00 nfcapd[2824]: Signal launcher"
  2083. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2084. 36595 syslogd RET recvfrom 49/0x31
  2085. 36595 syslogd CALL write(0x1,0x80101b000,0x59)
  2086. 36595 syslogd GIO fd 1 wrote 89 bytes
  2087. "logmsg: pri 36, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nfcapd[2824]: Signal launcher
  2088. "
  2089. 36595 syslogd RET write 89/0x59
  2090. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2091. 36595 syslogd RET sigprocmask 0
  2092. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2093. 36595 syslogd RET sigprocmask 0
  2094. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  2095. 36595 syslogd RET select 2
  2096. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2097. 36595 syslogd GIO fd 4 read 58 bytes
  2098. "<143>Dec 16 15:24:00 nrpe[43668]: Connection from closed."
  2099. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2100. 36595 syslogd RET recvfrom 58/0x3a
  2101. 36595 syslogd CALL write(0x1,0x80101b000,0x62)
  2102. 36595 syslogd GIO fd 1 wrote 98 bytes
  2103. "logmsg: pri 217, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nrpe[43668]: Connection from closed.
  2104. "
  2105. 36595 syslogd RET write 98/0x62
  2106. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2107. 36595 syslogd RET sigprocmask 0
  2108. 36595 syslogd CALL write(0x1,0x80101b000,0x23)
  2109. 36595 syslogd GIO fd 1 wrote 35 bytes
  2110. "Logging to FILE /var/log/debug.log
  2111. "
  2112. 36595 syslogd RET write 35/0x23
  2113. 36595 syslogd CALL writev(0x11,0x7fffffffd120,0x7)
  2114. 36595 syslogd GIO fd 17 wrote 62 bytes
  2115. "Dec 16 15:24:00 bsd-ap2 nrpe[43668]: Connection from closed.
  2116. "
  2117. 36595 syslogd RET writev 62/0x3e
  2118. 36595 syslogd CALL write(0x1,0x80101b000,0x23)
  2119. 36595 syslogd GIO fd 1 wrote 35 bytes
  2120. "Logging to FILE /var/log/nrpe2.log
  2121. "
  2122. 36595 syslogd RET write 35/0x23
  2123. 36595 syslogd CALL writev(0x13,0x7fffffffd120,0x7)
  2124. 36595 syslogd GIO fd 19 wrote 62 bytes
  2125. "Dec 16 15:24:00 bsd-ap2 nrpe[43668]: Connection from closed.
  2126. "
  2127. 36595 syslogd RET writev 62/0x3e
  2128. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2129. 36595 syslogd RET sigprocmask 0
  2130. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2131. 36595 syslogd GIO fd 5 read 58 bytes
  2132. "<30>Dec 16 15:24:00 nfcapd[2824]: Total ignored packets: 0"
  2133. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2134. 36595 syslogd RET recvfrom 58/0x3a
  2135. 36595 syslogd CALL write(0x1,0x80101b000,0x62)
  2136. 36595 syslogd GIO fd 1 wrote 98 bytes
  2137. "logmsg: pri 36, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nfcapd[2824]: Total ignored packets: 0
  2138. "
  2139. 36595 syslogd RET write 98/0x62
  2140. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2141. 36595 syslogd RET sigprocmask 0
  2142. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2143. 36595 syslogd RET sigprocmask 0
  2144. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  2145. 36595 syslogd RET select 2
  2146. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2147. 36595 syslogd GIO fd 4 read 75 bytes
  2148. "<22>Dec 16 15:24:00 postfix/smtpd[88101]: connect from localhost[127.0.0.1]"
  2149. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2150. 36595 syslogd RET recvfrom 75/0x4b
  2151. 36595 syslogd CALL write(0x1,0x80101b000,0x73)
  2152. 36595 syslogd GIO fd 1 wrote 115 bytes
  2153. "logmsg: pri 26, flags 0, from bsd-ap2, msg Dec 16 15:24:00 postfix/smtpd[88101]: connect from localhost[127.0.0.1]
  2154. "
  2155. 36595 syslogd RET write 115/0x73
  2156. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2157. 36595 syslogd RET sigprocmask 0
  2158. 36595 syslogd CALL write(0x1,0x80101b000,0x21)
  2159. 36595 syslogd GIO fd 1 wrote 33 bytes
  2160. "Logging to FILE /var/log/maillog
  2161. "
  2162. 36595 syslogd RET write 33/0x21
  2163. 36595 syslogd CALL writev(0xd,0x7fffffffd120,0x7)
  2164. 36595 syslogd GIO fd 13 wrote 80 bytes
  2165. "Dec 16 15:24:00 bsd-ap2 postfix/smtpd[88101]: connect from localhost[127.0.0.1]
  2166. "
  2167. 36595 syslogd RET writev 80/0x50
  2168. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2169. 36595 syslogd RET sigprocmask 0
  2170. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2171. 36595 syslogd GIO fd 5 read 55 bytes
  2172. "<30>Dec 16 15:24:00 nfcapd[2825]: Launcher: fork child."
  2173. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2174. 36595 syslogd RET recvfrom 55/0x37
  2175. 36595 syslogd CALL write(0x1,0x80101b000,0x5f)
  2176. 36595 syslogd GIO fd 1 wrote 95 bytes
  2177. "logmsg: pri 36, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nfcapd[2825]: Launcher: fork child.
  2178. "
  2179. 36595 syslogd RET write 95/0x5f
  2180. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2181. 36595 syslogd RET sigprocmask 0
  2182. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2183. 36595 syslogd RET sigprocmask 0
  2184. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  2185. 36595 syslogd RET select 2
  2186. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2187. 36595 syslogd GIO fd 4 read 97 bytes
  2188. "<22>Dec 16 15:24:00 postfix/smtpd[88101]: lost connection after CONNECT from localhost[127.0.0.1]"
  2189. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2190. 36595 syslogd RET recvfrom 97/0x61
  2191. 36595 syslogd CALL write(0x1,0x80101b000,0x89)
  2192. 36595 syslogd GIO fd 1 wrote 137 bytes
  2193. "logmsg: pri 26, flags 0, from bsd-ap2, msg Dec 16 15:24:00 postfix/smtpd[88101]: lost connection after CONNECT from localhost[127.0.0.1]
  2194. "
  2195. 36595 syslogd RET write 137/0x89
  2196. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2197. 36595 syslogd RET sigprocmask 0
  2198. 36595 syslogd CALL write(0x1,0x80101b000,0x21)
  2199. 36595 syslogd GIO fd 1 wrote 33 bytes
  2200. "Logging to FILE /var/log/maillog
  2201. "
  2202. 36595 syslogd RET write 33/0x21
  2203. 36595 syslogd CALL writev(0xd,0x7fffffffd120,0x7)
  2204. 36595 syslogd GIO fd 13 wrote 102 bytes
  2205. "Dec 16 15:24:00 bsd-ap2 postfix/smtpd[88101]: lost connection after CONNECT from localhost[127.0.0.1]
  2206. "
  2207. 36595 syslogd RET writev 102/0x66
  2208. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2209. 36595 syslogd RET sigprocmask 0
  2210. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2211. 36595 syslogd GIO fd 5 read 60 bytes
  2212. "<30>Dec 16 15:24:00 nfcapd[2825]: Launcher: child exec done."
  2213. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2214. 36595 syslogd RET recvfrom 60/0x3c
  2215. 36595 syslogd CALL write(0x1,0x80101b000,0x64)
  2216. 36595 syslogd GIO fd 1 wrote 100 bytes
  2217. "logmsg: pri 36, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nfcapd[2825]: Launcher: child exec done.
  2218. "
  2219. 36595 syslogd RET write 100/0x64
  2220. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2221. 36595 syslogd RET sigprocmask 0
  2222. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2223. 36595 syslogd RET sigprocmask 0
  2224. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  2225. 36595 syslogd RET select 2
  2226. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2227. 36595 syslogd GIO fd 4 read 91 bytes
  2228. "<22>Dec 16 15:24:00 postfix/smtpd[88101]: disconnect from localhost[127.0.0.1] commands=0/0"
  2229. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2230. 36595 syslogd RET recvfrom 91/0x5b
  2231. 36595 syslogd CALL write(0x1,0x80101b000,0x83)
  2232. 36595 syslogd GIO fd 1 wrote 131 bytes
  2233. "logmsg: pri 26, flags 0, from bsd-ap2, msg Dec 16 15:24:00 postfix/smtpd[88101]: disconnect from localhost[127.0.0.1] commands=0/0
  2234. "
  2235. 36595 syslogd RET write 131/0x83
  2236. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2237. 36595 syslogd RET sigprocmask 0
  2238. 36595 syslogd CALL write(0x1,0x80101b000,0x21)
  2239. 36595 syslogd GIO fd 1 wrote 33 bytes
  2240. "Logging to FILE /var/log/maillog
  2241. "
  2242. 36595 syslogd RET write 33/0x21
  2243. 36595 syslogd CALL writev(0xd,0x7fffffffd120,0x7)
  2244. 36595 syslogd GIO fd 13 wrote 96 bytes
  2245. "Dec 16 15:24:00 bsd-ap2 postfix/smtpd[88101]: disconnect from localhost[127.0.0.1] commands=0/0
  2246. "
  2247. 36595 syslogd RET writev 96/0x60
  2248. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2249. 36595 syslogd RET sigprocmask 0
  2250. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2251. 36595 syslogd GIO fd 5 read 65 bytes
  2252. "<30>Dec 16 15:24:00 nfcapd[2825]: launcher child exit 1 children."
  2253. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2254. 36595 syslogd RET recvfrom 65/0x41
  2255. 36595 syslogd CALL write(0x1,0x80101b000,0x69)
  2256. 36595 syslogd GIO fd 1 wrote 105 bytes
  2257. "logmsg: pri 36, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nfcapd[2825]: launcher child exit 1 children.
  2258. "
  2259. 36595 syslogd RET write 105/0x69
  2260. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2261. 36595 syslogd RET sigprocmask 0
  2262. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2263. 36595 syslogd RET sigprocmask 0
  2264. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  2265. 36595 syslogd RET select 1
  2266. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2267. 36595 syslogd GIO fd 5 read 69 bytes
  2268. "<30>Dec 16 15:24:00 nfcapd[2825]: launcher child 43760 exit status: 0"
  2269. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2270. 36595 syslogd RET recvfrom 69/0x45
  2271. 36595 syslogd CALL write(0x1,0x80101b000,0x6d)
  2272. 36595 syslogd GIO fd 1 wrote 109 bytes
  2273. "logmsg: pri 36, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nfcapd[2825]: launcher child 43760 exit status: 0
  2274. "
  2275. 36595 syslogd RET write 109/0x6d
  2276. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2277. 36595 syslogd RET sigprocmask 0
  2278. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2279. 36595 syslogd RET sigprocmask 0
  2280. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  2281. 36595 syslogd RET select 1
  2282. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2283. 36595 syslogd GIO fd 5 read 76 bytes
  2284. "<30>Dec 16 15:24:00 nfcapd[2825]: launcher waiting children done. 0 children"
  2285. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2286. 36595 syslogd RET recvfrom 76/0x4c
  2287. 36595 syslogd CALL write(0x1,0x80101b000,0x74)
  2288. 36595 syslogd GIO fd 1 wrote 116 bytes
  2289. "logmsg: pri 36, flags 0, from bsd-ap2, msg Dec 16 15:24:00 nfcapd[2825]: launcher waiting children done. 0 children
  2290. "
  2291. 36595 syslogd RET write 116/0x74
  2292. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2293. 36595 syslogd RET sigprocmask 0
  2294. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2295. 36595 syslogd RET sigprocmask 0
  2296. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0x7fffffffe960)
  2297. 36595 syslogd RET select 0
  2298. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0)
  2299. 36595 syslogd RET select 1
  2300. 36595 syslogd CALL recvfrom(0x5,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2301. 36595 syslogd GIO fd 5 read 84 bytes
  2302. "<29>Dec 16 15:24:35 mountd[5680]: mount request denied from 10.0.254.1 for /usr/home"
  2303. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2304. 36595 syslogd RET recvfrom 84/0x54
  2305. 36595 syslogd CALL write(0x1,0x80101b000,0x7c)
  2306. 36595 syslogd GIO fd 1 wrote 124 bytes
  2307. "logmsg: pri 35, flags 0, from bsd-ap2, msg Dec 16 15:24:35 mountd[5680]: mount request denied from 10.0.254.1 for /usr/home
  2308. "
  2309. 36595 syslogd RET write 124/0x7c
  2310. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2311. 36595 syslogd RET sigprocmask 0
  2312. 36595 syslogd CALL write(0x1,0x80101b000,0x22)
  2313. 36595 syslogd GIO fd 1 wrote 34 bytes
  2314. "Logging to FILE /var/log/messages
  2315. "
  2316. 36595 syslogd RET write 34/0x22
  2317. 36595 syslogd CALL writev(0xa,0x7fffffffd120,0x7)
  2318. 36595 syslogd GIO fd 10 wrote 89 bytes
  2319. "Dec 16 15:24:35 bsd-ap2 mountd[5680]: mount request denied from 10.0.254.1 for /usr/home
  2320. "
  2321. 36595 syslogd RET writev 89/0x59
  2322. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2323. 36595 syslogd RET sigprocmask 0
  2324. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0)
  2325. 36595 syslogd RET select 1
  2326. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2327. 36595 syslogd GIO fd 4 read 89 bytes
  2328. "<22>Dec 16 15:24:40 postfix/smtpd[80223]: connect from mail.rktelecom.ru[141.101.203.163]"
  2329. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2330. 36595 syslogd RET recvfrom 89/0x59
  2331. 36595 syslogd CALL write(0x1,0x80101b000,0x81)
  2332. 36595 syslogd GIO fd 1 wrote 129 bytes
  2333. "logmsg: pri 26, flags 0, from bsd-ap2, msg Dec 16 15:24:40 postfix/smtpd[80223]: connect from mail.rktelecom.ru[141.101.203.163]
  2334. "
  2335. 36595 syslogd RET write 129/0x81
  2336. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2337. 36595 syslogd RET sigprocmask 0
  2338. 36595 syslogd CALL write(0x1,0x80101b000,0x21)
  2339. 36595 syslogd GIO fd 1 wrote 33 bytes
  2340. "Logging to FILE /var/log/maillog
  2341. "
  2342. 36595 syslogd RET write 33/0x21
  2343. 36595 syslogd CALL writev(0xd,0x7fffffffd120,0x7)
  2344. 36595 syslogd GIO fd 13 wrote 94 bytes
  2345. "Dec 16 15:24:40 bsd-ap2 postfix/smtpd[80223]: connect from mail.rktelecom.ru[141.101.203.163]
  2346. "
  2347. 36595 syslogd RET writev 94/0x5e
  2348. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2349. 36595 syslogd RET sigprocmask 0
  2350. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0)
  2351. 36595 syslogd RET select 1
  2352. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2353. 36595 syslogd GIO fd 4 read 220 bytes
  2354. "<22>Dec 16 15:24:40 postfix/smtpd[80223]: NOQUEUE: reject: RCPT from mail.rktelecom.ru[141.101.203.163]: 454 4.7.1 <[email protected]>: Relay access denied; f\
  2355. rom=<> to=<[email protected]> proto=ESMTP helo=<mail.rktelecom.ru>"
  2356. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2357. 36595 syslogd RET recvfrom 220/0xdc
  2358. 36595 syslogd CALL write(0x1,0x80101b000,0x104)
  2359. 36595 syslogd GIO fd 1 wrote 260 bytes
  2360. "logmsg: pri 26, flags 0, from bsd-ap2, msg Dec 16 15:24:40 postfix/smtpd[80223]: NOQUEUE: reject: RCPT from mail.rktelecom.ru[141.101.203.163]: 454 4.7.1 <o\
  2361. [email protected]>: Relay access denied; from=<> to=<[email protected]> proto=ESMTP helo=<mail.rktelecom.ru>
  2362. "
  2363. 36595 syslogd RET write 260/0x104
  2364. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2365. 36595 syslogd RET sigprocmask 0
  2366. 36595 syslogd CALL write(0x1,0x80101b000,0x21)
  2367. 36595 syslogd GIO fd 1 wrote 33 bytes
  2368. "Logging to FILE /var/log/maillog
  2369. "
  2370. 36595 syslogd RET write 33/0x21
  2371. 36595 syslogd CALL writev(0xd,0x7fffffffd120,0x7)
  2372. 36595 syslogd GIO fd 13 wrote 225 bytes
  2373. "Dec 16 15:24:40 bsd-ap2 postfix/smtpd[80223]: NOQUEUE: reject: RCPT from mail.rktelecom.ru[141.101.203.163]: 454 4.7.1 <[email protected]>: Relay access denie\
  2374. d; from=<> to=<[email protected]> proto=ESMTP helo=<mail.rktelecom.ru>
  2375. "
  2376. 36595 syslogd RET writev 225/0xe1
  2377. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2378. 36595 syslogd RET sigprocmask 0
  2379. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0)
  2380. 36595 syslogd RET select 1
  2381. 36595 syslogd CALL recvfrom(0x4,0x7fffffffdc70,0x400,0,0x7fffffffdc00,0x7fffffffea64)
  2382. 36595 syslogd GIO fd 4 read 135 bytes
  2383. "<22>Dec 16 15:24:40 postfix/smtpd[80223]: disconnect from mail.rktelecom.ru[141.101.203.163] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4"
  2384. 36595 syslogd STRU struct sockaddr { AF_LOCAL, }
  2385. 36595 syslogd RET recvfrom 135/0x87
  2386. 36595 syslogd CALL write(0x1,0x80101b000,0xaf)
  2387. 36595 syslogd GIO fd 1 wrote 175 bytes
  2388. "logmsg: pri 26, flags 0, from bsd-ap2, msg Dec 16 15:24:40 postfix/smtpd[80223]: disconnect from mail.rktelecom.ru[141.101.203.163] ehlo=1 mail=1 rcpt=0/1 q\
  2389. uit=1 commands=3/4
  2390. "
  2391. 36595 syslogd RET write 175/0xaf
  2392. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd1c0,0x7fffffffd1b0)
  2393. 36595 syslogd RET sigprocmask 0
  2394. 36595 syslogd CALL write(0x1,0x80101b000,0x21)
  2395. 36595 syslogd GIO fd 1 wrote 33 bytes
  2396. "Logging to FILE /var/log/maillog
  2397. "
  2398. 36595 syslogd RET write 33/0x21
  2399. 36595 syslogd CALL writev(0xd,0x7fffffffd120,0x7)
  2400. 36595 syslogd GIO fd 13 wrote 140 bytes
  2401. "Dec 16 15:24:40 bsd-ap2 postfix/smtpd[80223]: disconnect from mail.rktelecom.ru[141.101.203.163] ehlo=1 mail=1 rcpt=0/1 quit=1 commands=3/4
  2402. "
  2403. 36595 syslogd RET writev 140/0x8c
  2404. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd1c0,0x7fffffffd1b0)
  2405. 36595 syslogd RET sigprocmask 0
  2406. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0)
  2407. 36595 syslogd RET select -1 errno 4 Interrupted system call
  2408. 36595 syslogd PSIG SIGALRM caught handler=0x404c60 mask=0x0 code=SI_KERNEL
  2409. 36595 syslogd CALL sigreturn(0x7fffffffd7a0)
  2410. 36595 syslogd RET sigreturn JUSTRETURN
  2411. 36595 syslogd CALL setitimer(0,0x7fffffffdbb0,0x7fffffffdb90)
  2412. 36595 syslogd STRU itimerval { .interval = {0, 0}, .value = {30, 0} }
  2413. 36595 syslogd STRU itimerval { .interval = {0, 0}, .value = {0, 0} }
  2414. 36595 syslogd RET setitimer 0
  2415. 36595 syslogd CALL select(0x9,0x8010360f8,0,0,0)
  2416. 36595 syslogd RET select -1 errno 4 Interrupted system call
  2417. 36595 syslogd PSIG SIGINT caught handler=0x404a90 mask=0x0 code=SI_KERNEL
  2418. 36595 syslogd CALL sigreturn(0x7fffffffd7a0)
  2419. 36595 syslogd RET sigreturn JUSTRETURN
  2420. 36595 syslogd CALL write(0x1,0x80101b000,0x1d)
  2421. 36595 syslogd GIO fd 1 wrote 29 bytes
  2422. "syslogd: exiting on signal 2
  2423. "
  2424. 36595 syslogd RET write 29/0x1d
  2425. 36595 syslogd CALL write(0x1,0x80101b000,0x1d)
  2426. 36595 syslogd GIO fd 1 wrote 29 bytes
  2427. "syslogd: exiting on signal 2
  2428. "
  2429. 36595 syslogd RET write 29/0x1d
  2430. 36595 syslogd CALL write(0x1,0x80101b000,0x48)
  2431. 36595 syslogd GIO fd 1 wrote 72 bytes
  2432. "logmsg: pri 53, flags 4, from bsd-ap2, msg syslogd: exiting on signal 2
  2433. "
  2434. 36595 syslogd RET write 72/0x48
  2435. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x7fffffffd370,0x7fffffffd360)
  2436. 36595 syslogd RET sigprocmask 0
  2437. 36595 syslogd CALL write(0x1,0x80101b000,0x12)
  2438. 36595 syslogd GIO fd 1 wrote 18 bytes
  2439. "Logging to UNUSED
  2440. "
  2441. 36595 syslogd RET write 18/0x12
  2442. 36595 syslogd CALL write(0x1,0x80101b000,0x22)
  2443. 36595 syslogd GIO fd 1 wrote 34 bytes
  2444. "Logging to FILE /var/log/messages
  2445. "
  2446. 36595 syslogd RET write 34/0x22
  2447. 36595 syslogd CALL writev(0xa,0x7fffffffd2d0,0x7)
  2448. 36595 syslogd GIO fd 10 wrote 53 bytes
  2449. "Dec 16 15:24:52 bsd-ap2 syslogd: exiting on signal 2
  2450. "
  2451. 36595 syslogd RET writev 53/0x35
  2452. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x7fffffffd370,0x7fffffffd360)
  2453. 36595 syslogd RET sigprocmask 0
  2454. 36595 syslogd CALL unlink(0x408c36)
  2455. 36595 syslogd NAMI "/var/run/log"
  2456. 36595 syslogd RET unlink 0
  2457. 36595 syslogd CALL unlink(0x408c25)
  2458. 36595 syslogd NAMI "/var/run/logpriv"
  2459. 36595 syslogd RET unlink 0
  2460. 36595 syslogd CALL fstat(0x3,0x7fffffffdab0)
  2461. 36595 syslogd STRU struct stat {dev=101, ino=4975875, mode=0100600, nlink=1, uid=0, gid=0, rdev=9942429, atime=1513434223.679455000, mtime=1513434254.682977000, ctime=1513434254.682977000, birthtime=1513434223.679452000, size=5, blksize=32768, blocks=8, flags=0x0 }
  2462. 36595 syslogd RET fstat 0
  2463. 36595 syslogd CALL unlink(0x801016004)
  2464. 36595 syslogd NAMI "/var/run/syslog.pid"
  2465. 36595 syslogd RET unlink 0
  2466. 36595 syslogd CALL close(0x3)
  2467. 36595 syslogd RET close 0
  2468. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffd9b0)
  2469. 36595 syslogd RET sigprocmask 0
  2470. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  2471. 36595 syslogd RET sigprocmask 0
  2472. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffd520)
  2473. 36595 syslogd RET sigprocmask 0
  2474. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  2475. 36595 syslogd RET sigprocmask 0
  2476. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffd520)
  2477. 36595 syslogd RET sigprocmask 0
  2478. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  2479. 36595 syslogd RET sigprocmask 0
  2480. 36595 syslogd CALL sigprocmask(SIG_BLOCK,0x80082bc78,0x7fffffffd520)
  2481. 36595 syslogd RET sigprocmask 0
  2482. 36595 syslogd CALL sigprocmask(SIG_SETMASK,0x80082bc8c,0)
  2483. 36595 syslogd RET sigprocmask 0
  2484. 36595 syslogd CALL exit(0x1)
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement