Attachment 1838 Details for Bug 1755 – strace -f -F -o sftp.log -s128 -p <sshd pid>

strace -f -F -o sftp.log -s128 -p <sshd pid>

sftp.log (text/plain), 143.76 KB, created by Martin Korous on 2010-04-13 19:19:20 AEST

(hide)

Description:

Filename:

MIME Type:

Creator: Martin Korous

Created: 2010-04-13 19:19:20 AEST

Size: 143.76 KB

patch

obsolete

>31338 select(7, [3 4], NULL, NULL, NULL) = 1 (in [3])
>31338 accept(3, {sa_family=AF_INET, sin_port=htons(47546), sin_addr=inet_addr("192.168.0.108")}, [16]) = 5
>31338 fcntl64(5, F_GETFL)               = 0x2 (flags O_RDWR)
>31338 time(NULL)                        = 1271075522
>31338 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31338 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31338 send(6, "<39>Apr 12 14:32:02 sshd[31338]: debug3: fd 5 is not O_NONBLOCK", 63, MSG_NOSIGNAL) = 63
>31338 close(6)                          = 0
>31338 pipe([6, 7])                      = 0
>31338 socketpair(PF_FILE, SOCK_STREAM, 0, [8, 9]) = 0
>31338 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7bd4728) = 31402
>31338 time(NULL)                        = 1271075522
>31338 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 10
>31402 time( <unfinished ...>
>31338 connect(10, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31402 <... time resumed> NULL)          = 1271075522
>31338 <... connect resumed> )           = 0
>31338 send(10, "<39>Apr 12 14:32:02 sshd[31338]: debug1: Forked child 31402.", 60, MSG_NOSIGNAL <unfinished ...>
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31338 <... send resumed> )              = 60
>31402 <... socket resumed> )            = 10
>31338 close(10 <unfinished ...>
>31402 connect(10, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31338 <... close resumed> )             = 0
>31402 <... connect resumed> )           = 0
>31338 close(7 <unfinished ...>
>31402 send(10, "<39>Apr 12 14:32:02 sshd[31402]: debug3: oom_adjust_restore", 59, MSG_NOSIGNAL <unfinished ...>
>31338 <... close resumed> )             = 0
>31402 <... send resumed> )              = 59
>31338 time( <unfinished ...>
>31402 close(10 <unfinished ...>
>31338 <... time resumed> NULL)          = 1271075522
>31402 <... close resumed> )             = 0
>31338 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31402 open("/proc/self/oom_adj", O_WRONLY|O_CREAT|O_TRUNC|O_LARGEFILE, 0666 <unfinished ...>
>31338 <... socket resumed> )            = 7
>31338 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31402 <... open resumed> )              = 10
>31338 <... connect resumed> )           = 0
>31402 fstat64(10,  <unfinished ...>
>31338 send(7, "<39>Apr 12 14:32:02 sshd[31338]: debug3: send_rexec_state: entering fd = 8 config len 241", 89, MSG_NOSIGNAL <unfinished ...>
>31402 <... fstat64 resumed> {st_mode=S_IFREG|0644, st_size=0, ...}) = 0
>31338 <... send resumed> )              = 89
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0 <unfinished ...>
>31338 close(7 <unfinished ...>
>31402 <... mmap2 resumed> )             = 0xb7f59000
>31338 <... close resumed> )             = 0
>31402 time( <unfinished ...>
>31338 time( <unfinished ...>
>31402 <... time resumed> NULL)          = 1271075522
>31338 <... time resumed> NULL)          = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31338 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31402 <... socket resumed> )            = 11
>31338 <... socket resumed> )            = 7
>31402 connect(11, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31338 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31402 <... connect resumed> )           = 0
>31338 <... connect resumed> )           = 0
>31402 send(11, "<38>Apr 12 14:32:02 sshd[31402]: Set /proc/self/oom_adj to 0", 60, MSG_NOSIGNAL <unfinished ...>
>31338 send(7, "<39>Apr 12 14:32:02 sshd[31338]: debug3: ssh_msg_send: type 0", 61, MSG_NOSIGNAL <unfinished ...>
>31402 <... send resumed> )              = 60
>31338 <... send resumed> )              = 61
>31402 close(11 <unfinished ...>
>31338 close(7 <unfinished ...>
>31402 <... close resumed> )             = 0
>31338 <... close resumed> )             = 0
>31402 write(10, "0\n", 2 <unfinished ...>
>31338 write(8, "\0\0\0\371\0", 5 <unfinished ...>
>31402 <... write resumed> )             = 2
>31338 <... write resumed> )             = 5
>31402 close(10 <unfinished ...>
>31338 write(8, "\0\0\0\360\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nProtocol 2\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nLogLevel DEBUG3\n\n\n\n\nPermitRootLogin yes\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nPasswordAuthenticat"..., 248 <unfinished ...>
>31402 <... close resumed> )             = 0
>31338 <... write resumed> )             = 248
>31402 munmap(0xb7f59000, 4096 <unfinished ...>
>31338 time( <unfinished ...>
>31402 <... munmap resumed> )            = 0
>31338 <... time resumed> NULL)          = 1271075522
>31402 close(6 <unfinished ...>
>31338 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31402 <... close resumed> )             = 0
>31338 <... socket resumed> )            = 7
>31402 close(3 <unfinished ...>
>31338 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31402 <... close resumed> )             = 0
>31338 <... connect resumed> )           = 0
>31402 close(4 <unfinished ...>
>31338 send(7, "<39>Apr 12 14:32:02 sshd[31338]: debug3: send_rexec_state: done", 63, MSG_NOSIGNAL <unfinished ...>
>31402 <... close resumed> )             = 0
>31338 <... send resumed> )              = 63
>31402 close(8 <unfinished ...>
>31338 close(7 <unfinished ...>
>31402 <... close resumed> )             = 0
>31338 <... close resumed> )             = 0
>31338 close(8)                          = 0
>31338 close(9 <unfinished ...>
>31402 setsid( <unfinished ...>
>31338 <... close resumed> )             = 0
>31402 <... setsid resumed> )            = 31402
>31338 close(5 <unfinished ...>
>31402 time( <unfinished ...>
>31338 <... close resumed> )             = 0
>31402 <... time resumed> NULL)          = 1271075522
>31338 select(7, [3 4 6], NULL, NULL, NULL <unfinished ...>
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 3
>31402 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(3, "<39>Apr 12 14:32:02 sshd[31402]: debug1: rexec start in 5 out 5 newsock 5 pipe 7 sock 8", 87, MSG_NOSIGNAL) = 87
>31402 close(3)                          = 0
>31402 dup2(5, 0)                        = 0
>31402 dup2(0, 1)                        = 1
>31402 dup2(7, 4)                        = 4
>31402 dup2(9, 5)                        = 5
>31402 close(9)                          = 0
>31402 close(7)                          = 0
>31402 execve("/usr/sbin/sshd", ["/usr/sbin/sshd", "-R"], [/* 17 vars */]) = 0
>31402 brk(0)                            = 0x80b3000
>31402 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
>31402 open("/etc/ld.so.cache", O_RDONLY) = 3
>31402 fstat64(3, {st_mode=S_IFREG|0644, st_size=105476, ...}) = 0
>31402 mmap2(NULL, 105476, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7fc8000
>31402 close(3)                          = 0
>31402 open("/lib/libwrap.so.0", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\36\0\0004\0\0\0\30i\0\0\0\0\0\0004\0 \0\5\0(\0\30\0\27\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\24]\0\0\24]\0\0\5\0\0\0\0\20\0\0\1\0\0\0\0`\0\0\0`\0\0\0`\0\0L\5\0\0\4\r\0\0\6\0\0\0\0\20\0\0\2\0\0\0\24`\0\0\24`\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=27864, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fc7000
>31402 mmap2(NULL, 27908, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7fc0000
>31402 mmap2(0xb7fc6000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6) = 0xb7fc6000
>31402 close(3)                          = 0
>31402 open("/lib/libpam.so.0", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200\33\0\0004\0\0\0\274\261\0\0\0\0\0\0004\0 \0\6\0(\0\32\0\31\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\250\240\0\0\250\240\0\0\5\0\0\0\0\20\0\0\1\0\0\0\30\256\0\0\30\276\0\0\30\276\0\0\334\2\0\0\344\2\0\0\6\0\0\0\0\20\0\0\2\0\0\0\344\256\0\0\344\276\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=46540, ...}) = 0
>31402 mmap2(NULL, 49404, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7fb3000
>31402 mmap2(0xb7fbe000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa) = 0xb7fbe000
>31402 close(3)                          = 0
>31402 open("/lib/libresolv.so.2", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200&\0\0004\0\0\0@\22\1\0\0\0\0\0004\0 \0\t\0(\0\34\0\33\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0 \1\0\0 \1\0\0\5\0\0\0\4\0\0\0\3\0\0\0\320\371\0\0\320\371\0\0\320\371\0\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=71328, ...}) = 0
>31402 mmap2(NULL, 84072, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7f9e000
>31402 mmap2(0xb7faf000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10) = 0xb7faf000
>31402 mmap2(0xb7fb1000, 6248, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7fb1000
>31402 close(3)                          = 0
>31402 open("/usr/lib/libssl.so.0.9.8", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\337\0\0004\0\0\0\254\214\4\0\0\0\0\0004\0 \0\6\0(\0\31\0\30\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0HN\4\0HN\4\0\5\0\0\0\0\20\0\0\1\0\0\0\314V\4\0\314V\4\0\314V\4\0$5\0\0\2545\0\0\6\0\0\0\0\20\0\0\2\0\0\0\240^\4\0\240^\4\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0555, st_size=299156, ...}) = 0
>31402 mmap2(NULL, 298104, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7f55000
>31402 mmap2(0xb7f9a000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x45) = 0xb7f9a000
>31402 close(3)                          = 0
>31402 open("/usr/lib/libcrypto.so.0.9.8", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\316\3\0004\0\0\0\354\262\24\0\0\0\0\0004\0 \0\7\0(\0\32\0\31\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\300U\23\0\300U\23\0\5\0\0\0\0\20\0\0\1\0\0\0008V\23\0008f\23\0008f\23\0\354[\1\0\0\217\1\0\6\0\0\0\0\20\0\0\2\0\0\0\250\312\23\0\250\332\23\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0555, st_size=1357564, ...}) = 0
>31402 mmap2(NULL, 1373496, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7e05000
>31402 mmap2(0xb7f3b000, 94208, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x135) = 0xb7f3b000
>31402 mmap2(0xb7f52000, 9528, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7f52000
>31402 close(3)                          = 0
>31402 open("/lib/libdl.so.2", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000\n\0\0004\0\0\0(!\0\0\0\0\0\0004\0 \0\t\0(\0\34\0\33\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0 \1\0\0 \1\0\0\5\0\0\0\4\0\0\0\3\0\0\0\363\31\0\0\363\31\0\0\363\31\0\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=9608, ...}) = 0
>31402 mmap2(NULL, 12408, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7e01000
>31402 mmap2(0xb7e03000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0xb7e03000
>31402 close(3)                          = 0
>31402 open("/lib/libz.so.1", O_RDONLY)  = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\24\0\0004\0\0\0\10\f\1\0\0\0\0\0004\0 \0\5\0(\0\30\0\27\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\244\10\1\0\244\10\1\0\5\0\0\0\0\20\0\0\1\0\0\0\244\10\1\0\244\30\1\0\244\30\1\0\254\2\0\0\260\2\0\0\6\0\0\0\0\20\0\0\2\0\0\0h\t\1\0h\31\1\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=69576, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7e00000
>31402 mmap2(NULL, 72532, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7dee000
>31402 mmap2(0xb7dff000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10) = 0xb7dff000
>31402 close(3)                          = 0
>31402 open("/lib/libutil.so.1", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P\n\0\0004\0\0\0`!\0\0\0\0\0\0004\0 \0\t\0(\0\33\0\32\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0 \1\0\0 \1\0\0\5\0\0\0\4\0\0\0\3\0\0\0\206\23\0\0\206\23\0\0\206\23\0\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=9624, ...}) = 0
>31402 mmap2(NULL, 12432, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7dea000
>31402 mmap2(0xb7dec000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0xb7dec000
>31402 close(3)                          = 0
>31402 open("/lib/libnsl.so.1", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\2001\0\0004\0\0\0\2002\1\0\0\0\0\0004\0 \0\t\0(\0\33\0\32\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0 \1\0\0 \1\0\0\5\0\0\0\4\0\0\0\3\0\0\0\340\30\1\0\340\30\1\0\340\30\1\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=79544, ...}) = 0
>31402 mmap2(NULL, 92136, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7dd3000
>31402 mmap2(0xb7de6000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12) = 0xb7de6000
>31402 mmap2(0xb7de8000, 6120, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7de8000
>31402 close(3)                          = 0
>31402 open("/lib/libcrypt.so.1", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200\7\0\0004\0\0\0 \201\0\0\0\0\0\0004\0 \0\t\0(\0\33\0\32\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0 \1\0\0 \1\0\0\5\0\0\0\4\0\0\0\3\0\0\0\0v\0\0\0v\0\0\0v\0\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=34136, ...}) = 0
>31402 mmap2(NULL, 196956, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7da2000
>31402 mmap2(0xb7daa000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7) = 0xb7daa000
>31402 mmap2(0xb7dac000, 155996, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7dac000
>31402 close(3)                          = 0
>31402 open("/lib/libc.so.6", O_RDONLY)  = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260k\1\0004\0\0\0\244\26\24\0\0\0\0\0004\0 \0\v\0(\0C\0B\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0`\1\0\0`\1\0\0\5\0\0\0\4\0\0\0\3\0\0\0\300\213\22\0\300\213\22\0\300\213\22\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=1319196, ...}) = 0
>31402 mmap2(NULL, 1325352, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7c5e000
>31402 mmap2(0xb7d9c000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13e) = 0xb7d9c000
>31402 mmap2(0xb7d9f000, 10536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7d9f000
>31402 close(3)                          = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c5d000
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7c5c000
>31402 set_thread_area({entry_number:-1 -> 6, base_addr:0xb7c5c6c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
>31402 mprotect(0xb7d9c000, 8192, PROT_READ) = 0
>31402 mprotect(0xb7daa000, 4096, PROT_READ) = 0
>31402 mprotect(0xb7de6000, 4096, PROT_READ) = 0
>31402 mprotect(0xb7dec000, 4096, PROT_READ) = 0
>31402 mprotect(0xb7e03000, 4096, PROT_READ) = 0
>31402 mprotect(0xb7f3b000, 32768, PROT_READ) = 0
>31402 mprotect(0xb7f9a000, 4096, PROT_READ) = 0
>31402 mprotect(0xb7faf000, 4096, PROT_READ) = 0
>31402 mprotect(0xb7fbe000, 4096, PROT_READ) = 0
>31402 mprotect(0x80ab000, 4096, PROT_READ) = 0
>31402 mprotect(0xb7ffe000, 4096, PROT_READ) = 0
>31402 munmap(0xb7fc8000, 105476)        = 0
>31402 brk(0)                            = 0x80b3000
>31402 brk(0x80d4000)                    = 0x80d4000
>31402 geteuid32()                       = 0
>31402 setgroups32(0, [])                = 0
>31402 open("/dev/null", O_RDWR|O_LARGEFILE) = 3
>31402 close(3)                          = 0
>31402 getpid()                          = 31402
>31402 open("/proc/31402/fd", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 3
>31402 fcntl64(3, F_GETFD)               = 0x1 (flags FD_CLOEXEC)
>31402 getdents64(3, /* 8 entries */, 32768) = 192
>31402 getdents64(3, /* 0 entries */, 32768) = 0
>31402 close(3)                          = 0
>31402 open("/etc/ssl/openssl.cnf", O_RDONLY|O_LARGEFILE) = 3
>31402 fstat64(3, {st_mode=S_IFREG|0644, st_size=9374, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe1000
>31402 read(3, "#\n# OpenSSL example configuration file.\n# This is mostly being used for generation of certificate requests.\n#\n\n# This definition"..., 4096) = 4096
>31402 read(3, "_name ]\ncountryName\t\t\t= Country Name (2 letter code)\ncountryName_default\t\t= AU\ncountryName_min\t\t\t= 2\ncountryName_max\t\t\t= 2\n\nstat"..., 4096) = 4096
>31402 read(3, " an SSL server.\n# nsCertType\t\t\t= server\n\n# For an object signing certificate this would be used.\n# nsCertType = objsign\n\n# For n"..., 4096) = 1182
>31402 read(3, "", 4096)                 = 0
>31402 close(3)                          = 0
>31402 munmap(0xb7fe1000, 4096)          = 0
>31402 read(5, "\0\0\0\371", 4)          = 4
>31402 read(5, "\0\0\0\0\360\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nProtocol 2\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nLogLevel DEBUG3\n\n\n\n\nPermitRootLogin yes\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\nPasswordAuthentica"..., 249) = 249
>31402 open("/dev/urandom", O_RDONLY|O_NOCTTY|O_NONBLOCK) = 3
>31402 fstat64(3, {st_mode=S_IFCHR|0666, st_rdev=makedev(1, 9), ...}) = 0
>31402 poll([{fd=3, events=POLLIN}], 1, 10) = 1 ([{fd=3, revents=POLLIN}])
>31402 read(3, "\4<J\301\335l\212L\33\353\300\274b\223\4\0025\377\275A\235\3131a\261\3050HBM\262u", 32) = 32
>31402 close(3)                          = 0
>31402 getuid32()                        = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_NETLINK, SOCK_RAW, 0)   = 3
>31402 bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
>31402 getsockname(3, {sa_family=AF_NETLINK, pid=31402, groups=00000000}, [12]) = 0
>31402 time(NULL)                        = 1271075522
>31402 sendto(3, "\24\0\0\0\26\0\1\3\302\22\303K\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
>31402 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"8\0\0\0\24\0\2\0\302\22\303K\252z\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1\10\0\2\0\177\0\0\1\10\0\4\0\177\377\377\377\7\0\3\0lo\0\0<\0\0\0\24\0\2\0\302\22\303K\252z\0\0\2\30\200\0\3\0\0\0\10\0\1\0\300\250\0l\10\0\2\0\300\250\0l\10\0\4\0\300\250\0\377\t\0\3\0eth0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 116
>31402 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\302\22\303K\252z\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0@\0\0\0\24\0\2\0\302\22\303K\252z\0\0\n@\200\375\3\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\2\34\300\377\3764\234\340\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
>31402 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\302\22\303K\252z\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0@\0\0\0\24\0\2\0\302\22\303K\252z\0\0\n@\200\375\3\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\2\34\300\377\3764\234\340\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
>31402 close(3)                          = 0
>31402 open("/etc/gai.conf", O_RDONLY)   = 3
>31402 fstat64(3, {st_mode=S_IFREG|0644, st_size=2689, ...}) = 0
>31402 fstat64(3, {st_mode=S_IFREG|0644, st_size=2689, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe1000
>31402 read(3, "# Configuration for getaddrinfo(3).\n#\n# So far only configuration for the destination address sorting is needed.\n# RFC 3484 gove"..., 4096) = 2689
>31402 read(3, "", 4096)                 = 0
>31402 close(3)                          = 0
>31402 munmap(0xb7fe1000, 4096)          = 0
>31402 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3
>31402 connect(3, {sa_family=AF_INET6, sin6_port=htons(22), inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0
>31402 getsockname(3, {sa_family=AF_INET6, sin6_port=htons(46933), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0
>31402 connect(3, {sa_family=AF_UNSPEC, sa_data="\0\0\0\0\0\0\0\0\0\0\0\0\0\0"}, 16) = 0
>31402 connect(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("0.0.0.0")}, 16) = 0
>31402 getsockname(3, {sa_family=AF_INET6, sin6_port=htons(45383), inet_pton(AF_INET6, "::ffff:127.0.0.1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0
>31402 close(3)                          = 0
>31402 socket(PF_FILE, SOCK_STREAM|0x80800 /* SOCK_??? */, 0) = 3
>31402 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
>31402 close(3)                          = 0
>31402 socket(PF_FILE, SOCK_STREAM|0x80800 /* SOCK_??? */, 0) = 3
>31402 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
>31402 close(3)                          = 0
>31402 open("/etc/nsswitch.conf", O_RDONLY) = 3
>31402 fstat64(3, {st_mode=S_IFREG|0644, st_size=508, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe1000
>31402 read(3, "# /etc/nsswitch.conf:\n# $Header: /var/cvsroot/gentoo/src/patchsets/glibc/extra/etc/nsswitch.conf,v 1.1 2006/09/29 23:52:23 vapie"..., 4096) = 508
>31402 read(3, "", 4096)                 = 0
>31402 close(3)                          = 0
>31402 munmap(0xb7fe1000, 4096)          = 0
>31402 open("/etc/ld.so.cache", O_RDONLY) = 3
>31402 fstat64(3, {st_mode=S_IFREG|0644, st_size=105476, ...}) = 0
>31402 mmap2(NULL, 105476, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7fc8000
>31402 close(3)                          = 0
>31402 open("/lib/libnss_compat.so.2", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0P\16\0\0004\0\0\0\\b\0\0\0\0\0\0004\0 \0\t\0(\0\33\0\32\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0 \1\0\0 \1\0\0\5\0\0\0\4\0\0\0\3\0\0\0002[\0\0002[\0\0002[\0\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=26260, ...}) = 0
>31402 mmap2(NULL, 29256, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7c54000
>31402 mmap2(0xb7c5a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5) = 0xb7c5a000
>31402 close(3)                          = 0
>31402 mprotect(0xb7c5a000, 4096, PROT_READ) = 0
>31402 munmap(0xb7fc8000, 105476)        = 0
>31402 open("/etc/ld.so.cache", O_RDONLY) = 3
>31402 fstat64(3, {st_mode=S_IFREG|0644, st_size=105476, ...}) = 0
>31402 mmap2(NULL, 105476, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7fc8000
>31402 close(3)                          = 0
>31402 open("/lib/libnss_nis.so.2", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\31\0\0004\0\0\0\260\221\0\0\0\0\0\0004\0 \0\t\0(\0\33\0\32\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0 \1\0\0 \1\0\0\5\0\0\0\4\0\0\0\3\0\0\0\210{\0\0\210{\0\0\210{\0\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=38376, ...}) = 0
>31402 mmap2(NULL, 41536, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7c49000
>31402 mmap2(0xb7c52000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8) = 0xb7c52000
>31402 close(3)                          = 0
>31402 open("/lib/libnss_files.so.2", O_RDONLY) = 3
>31402 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\32\0\0004\0\0\0\214\221\0\0\0\0\0\0004\0 \0\t\0(\0\33\0\32\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0 \1\0\0 \1\0\0\5\0\0\0\4\0\0\0\3\0\0\0\231\207\0\0\231\207\0\0\231\207\0\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31402 fstat64(3, {st_mode=S_IFREG|0755, st_size=38340, ...}) = 0
>31402 mmap2(NULL, 41676, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7c3e000
>31402 mmap2(0xb7c47000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8) = 0xb7c47000
>31402 close(3)                          = 0
>31402 mprotect(0xb7c47000, 4096, PROT_READ) = 0
>31402 mprotect(0xb7c52000, 4096, PROT_READ) = 0
>31402 munmap(0xb7fc8000, 105476)        = 0
>31402 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
>31402 fcntl64(3, F_GETFD)               = 0x1 (flags FD_CLOEXEC)
>31402 _llseek(3, 0, [0], SEEK_CUR)      = 0
>31402 fstat64(3, {st_mode=S_IFREG|0644, st_size=2735, ...}) = 0
>31402 mmap2(NULL, 2735, PROT_READ, MAP_SHARED, 3, 0) = 0xb7fe1000
>31402 _llseek(3, 2735, [2735], SEEK_SET) = 0
>31402 munmap(0xb7fe1000, 2735)          = 0
>31402 close(3)                          = 0
>31402 open("/etc/ssh/ssh_host_rsa_key", O_RDONLY|O_LARGEFILE) = 3
>31402 fstat64(3, {st_mode=S_IFREG|0600, st_size=1675, ...}) = 0
>31402 getuid32()                        = 0
>31402 fstat64(3, {st_mode=S_IFREG|0600, st_size=1675, ...}) = 0
>31402 read(3, "-----BEGIN RSA PRIVATE KEY-----\nMIIEoQIBAAKCAQEAlm1VlA/6WucHMuR+/gSv+ibPlvgVDnY2CjlBEko2aGq5gf8F\nLtvs5aaNtHiHQU+DU0AndjDgPKo5XZX"..., 1675) = 1675
>31402 _llseek(3, 0, [0], SEEK_SET)      = 0
>31402 fcntl64(3, F_GETFL)               = 0x8000 (flags O_RDONLY|O_LARGEFILE)
>31402 fstat64(3, {st_mode=S_IFREG|0600, st_size=1675, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe1000
>31402 _llseek(3, 0, [0], SEEK_CUR)      = 0
>31402 read(3, "-----BEGIN RSA PRIVATE KEY-----\nMIIEoQIBAAKCAQEAlm1VlA/6WucHMuR+/gSv+ibPlvgVDnY2CjlBEko2aGq5gf8F\nLtvs5aaNtHiHQU+DU0AndjDgPKo5XZX"..., 4096) = 1675
>31402 time(NULL)                        = 1271075522
>31402 close(3)                          = 0
>31402 munmap(0xb7fe1000, 4096)          = 0
>31402 open("/etc/ssh/ssh_host_dsa_key", O_RDONLY|O_LARGEFILE) = 3
>31402 fstat64(3, {st_mode=S_IFREG|0600, st_size=668, ...}) = 0
>31402 getuid32()                        = 0
>31402 fstat64(3, {st_mode=S_IFREG|0600, st_size=668, ...}) = 0
>31402 read(3, "-----BEGIN DSA PRIVATE KEY-----\nMIIBuQIBAAKBgQCE3JVwnDvQbzl0cC5y8q7yLG9PnLUBNJVgs7zfh31J3GM7jJdT\n9M4wh2PjfYh7ejqpahIEvrUxQmWiMJg"..., 668) = 668
>31402 _llseek(3, 0, [0], SEEK_SET)      = 0
>31402 fcntl64(3, F_GETFL)               = 0x8000 (flags O_RDONLY|O_LARGEFILE)
>31402 fstat64(3, {st_mode=S_IFREG|0600, st_size=668, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe1000
>31402 _llseek(3, 0, [0], SEEK_CUR)      = 0
>31402 read(3, "-----BEGIN DSA PRIVATE KEY-----\nMIIBuQIBAAKBgQCE3JVwnDvQbzl0cC5y8q7yLG9PnLUBNJVgs7zfh31J3GM7jJdT\n9M4wh2PjfYh7ejqpahIEvrUxQmWiMJg"..., 4096) = 668
>31402 close(3)                          = 0
>31402 munmap(0xb7fe1000, 4096)          = 0
>31402 stat64("/var/empty", {st_mode=S_IFDIR|0755, st_size=88, ...}) = 0
>31402 setgroups32(0, [])                = 0
>31402 umask(077)                        = 022
>31402 umask(022)                        = 077
>31402 chdir("/")                        = 0
>31402 rt_sigaction(SIGPIPE, NULL, {SIG_IGN, [], 0}, 8) = 0
>31402 close(5)                          = 0
>31402 dup(0)                            = 3
>31402 dup(4)                            = 5
>31402 close(4)                          = 0
>31402 open("/dev/null", O_RDWR|O_LARGEFILE) = 4
>31402 dup2(4, 0)                        = 0
>31402 dup2(4, 1)                        = 1
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 open("/etc/localtime", O_RDONLY)  = 4
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=755, ...}) = 0
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=755, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe1000
>31402 read(4, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\0\0\0\0\206\0\0\0\4\0\0\0\t\233\f\27`\233\325\332\360\234\331\256\220\235\244\265\220\236\271\220\220\237\204\227\220\310\tq\220\314\347K\20\315\251\27\220\316\242C\20\317\2224\20\320\202%\20\r\244c\220\16\213\32\20\17\204E\220\20t6\220\21d'\220\22T\30\220\23MD\20\0243\372\220\25#\353\220"..., 4096) = 755
>31402 close(4)                          = 0
>31402 munmap(0xb7fe1000, 4096)          = 0
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug1: inetd sockets after dupping: 3, 3", 74, MSG_NOSIGNAL) = 74
>31402 close(4)                          = 0
>31402 fcntl64(3, F_SETFD, FD_CLOEXEC)   = 0
>31402 fcntl64(3, F_SETFD, FD_CLOEXEC)   = 0
>31402 alarm(0)                          = 0
>31402 rt_sigaction(SIGALRM, NULL, {SIG_DFL, [], 0}, 8) = 0
>31402 rt_sigaction(SIGHUP, NULL, {SIG_DFL, [], 0}, 8) = 0
>31402 rt_sigaction(SIGTERM, NULL, {SIG_DFL, [], 0}, 8) = 0
>31402 rt_sigaction(SIGQUIT, NULL, {SIG_DFL, [], 0}, 8) = 0
>31402 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0
>31402 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
>31402 setsockopt(3, SOL_SOCKET, SO_KEEPALIVE, [1], 4) = 0
>31402 getpeername(3, {sa_family=AF_INET, sin_port=htons(47546), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31402 getpeername(3, {sa_family=AF_INET, sin_port=htons(47546), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31402 open("/etc/ld.so.cache", O_RDONLY) = 4
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=105476, ...}) = 0
>31402 mmap2(NULL, 105476, PROT_READ, MAP_PRIVATE, 4, 0) = 0xb7fc8000
>31402 close(4)                          = 0
>31402 open("/lib/tls/i686/sse2/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/lib/tls/i686/sse2", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/lib/tls/i686/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/lib/tls/i686", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/lib/tls/sse2/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/lib/tls/sse2", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/lib/tls/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/lib/tls", 0xbfafce60)    = -1 ENOENT (No such file or directory)
>31402 open("/lib/i686/sse2/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/lib/i686/sse2", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/lib/i686/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/lib/i686", 0xbfafce60)   = -1 ENOENT (No such file or directory)
>31402 open("/lib/sse2/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/lib/sse2", 0xbfafce60)   = -1 ENOENT (No such file or directory)
>31402 open("/lib/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/lib", {st_mode=S_IFDIR|0755, st_size=4896, ...}) = 0
>31402 open("/usr/lib/tls/i686/sse2/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/usr/lib/tls/i686/sse2", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/usr/lib/tls/i686/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/usr/lib/tls/i686", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/usr/lib/tls/sse2/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/usr/lib/tls/sse2", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/usr/lib/tls/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/usr/lib/tls", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/usr/lib/i686/sse2/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/usr/lib/i686/sse2", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/usr/lib/i686/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/usr/lib/i686", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/usr/lib/sse2/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/usr/lib/sse2", 0xbfafce60) = -1 ENOENT (No such file or directory)
>31402 open("/usr/lib/libnss_db.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 stat64("/usr/lib", {st_mode=S_IFDIR|0755, st_size=105520, ...}) = 0
>31402 munmap(0xb7fc8000, 105476)        = 0
>31402 open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 4
>31402 fcntl64(4, F_GETFD)               = 0x1 (flags FD_CLOEXEC)
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=5681, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fe1000
>31402 read(4, "# /etc/protocols\n#\n# Internet (IP) protocols definition file\n#\n# See protocols(5) for more info\n# See also http://www.iana.org/a"..., 4096) = 4096
>31402 close(4)                          = 0
>31402 munmap(0xb7fe1000, 4096)          = 0
>31402 getsockopt(3, SOL_IP, IP_OPTIONS, "", [0]) = 0
>31402 getpeername(3, {sa_family=AF_INET, sin_port=htons(47546), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31402 getpeername(3, {sa_family=AF_INET, sin_port=htons(47546), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31402 getsockname(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31402 open("/etc/hosts.allow", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 open("/etc/hosts.deny", O_RDONLY) = -1 ENOENT (No such file or directory)
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<38>Apr 12 14:32:02 sshd[31402]: Connection from 192.168.0.108 port 47546", 73, MSG_NOSIGNAL) = 73
>31402 close(4)                          = 0
>31402 rt_sigaction(SIGALRM, NULL, {SIG_DFL, [], 0}, 8) = 0
>31402 rt_sigaction(SIGALRM, {0x804e1b0, [], SA_INTERRUPT}, NULL, 8) = 0
>31402 alarm(120)                        = 0
>31402 write(3, "SSH-2.0-OpenSSH_5.4\r\n", 21) = 21
>31402 read(3, "S", 1)                   = 1
>31402 read(3, "S", 1)                   = 1
>31402 read(3, "H", 1)                   = 1
>31402 read(3, "-", 1)                   = 1
>31402 read(3, "2", 1)                   = 1
>31402 read(3, ".", 1)                   = 1
>31402 read(3, "0", 1)                   = 1
>31402 read(3, "-", 1)                   = 1
>31402 read(3, "O", 1)                   = 1
>31402 read(3, "p", 1)                   = 1
>31402 read(3, "e", 1)                   = 1
>31402 read(3, "n", 1)                   = 1
>31402 read(3, "S", 1)                   = 1
>31402 read(3, "S", 1)                   = 1
>31402 read(3, "H", 1)                   = 1
>31402 read(3, "_", 1)                   = 1
>31402 read(3, "5", 1)                   = 1
>31402 read(3, ".", 1)                   = 1
>31402 read(3, "4", 1)                   = 1
>31402 read(3, "\r", 1)                  = 1
>31402 read(3, "\n", 1)                  = 1
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug1: Client protocol version 2.0; client software version OpenSSH_5.4", 105, MSG_NOSIGNAL) = 105
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug1: match: OpenSSH_5.4 pat OpenSSH*", 72, MSG_NOSIGNAL) = 72
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug1: Enabling compatibility mode for protocol 2.0", 85, MSG_NOSIGNAL) = 85
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug1: Local version string SSH-2.0-OpenSSH_5.4", 81, MSG_NOSIGNAL) = 81
>31402 close(4)                          = 0
>31402 fcntl64(3, F_GETFL)               = 0x2 (flags O_RDWR)
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug2: fd 3 setting O_NONBLOCK", 64, MSG_NOSIGNAL) = 64
>31402 close(4)                          = 0
>31402 fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0
>31402 socketpair(PF_FILE, SOCK_STREAM, 0, [4, 6]) = 0
>31402 fcntl64(4, F_SETFD, FD_CLOEXEC)   = 0
>31402 fcntl64(6, F_SETFD, FD_CLOEXEC)   = 0
>31402 mmap2(NULL, 65536, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_ANONYMOUS, -1, 0) = 0xb7fd2000
>31402 mmap2(NULL, 1310720, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_ANONYMOUS, -1, 0) = 0xb7afe000
>31402 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7c5c728) = 31403
>31402 time(NULL)                        = 1271075522
>31403 close(6 <unfinished ...>
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31403 <... close resumed> )             = 0
>31403 getuid32( <unfinished ...>
>31402 <... socket resumed> )            = 7
>31403 <... getuid32 resumed> )          = 0
>31402 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(7, "<39>Apr 12 14:32:02 sshd[31402]: debug2: Network child is on pid 31403", 70, MSG_NOSIGNAL) = 70
>31402 close(7)                          = 0
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31403 chroot("/var/empty")              = 0
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31403 chdir("/" <unfinished ...>
>31402 <... socket resumed> )            = 4
>31403 <... chdir resumed> )             = 0
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31403 time(NULL)                        = 1271075522
>31402 <... connect resumed> )           = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: preauth child monitor started", 70, MSG_NOSIGNAL <unfinished ...>
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31402 <... send resumed> )              = 70
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31402 close(4 <unfinished ...>
>31403 <... connect resumed> )           = -1 ENOENT (No such file or directory)
>31403 close(6 <unfinished ...>
>31402 <... close resumed> )             = 0
>31403 <... close resumed> )             = 0
>31403 setgroups32(1, [22] <unfinished ...>
>31402 time( <unfinished ...>
>31403 <... setgroups32 resumed> )       = 0
>31403 getuid32( <unfinished ...>
>31402 <... time resumed> NULL)          = 1271075522
>31403 <... getuid32 resumed> )          = 0
>31403 getgid32( <unfinished ...>
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31403 <... getgid32 resumed> )          = 0
>31402 <... socket resumed> )            = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31403 time(NULL)                        = 1271075522
>31402 <... connect resumed> )           = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_receive entering", 68, MSG_NOSIGNAL <unfinished ...>
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31402 <... send resumed> )              = 68
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31402 close(4 <unfinished ...>
>31403 <... connect resumed> )           = -1 ENOENT (No such file or directory)
>31402 <... close resumed> )             = 0
>31403 close(6)                          = 0
>31402 read(6,  <unfinished ...>
>31403 setresgid32(22, 22, 22)           = 0
>31403 setresuid32(22, 22, 22)           = 0
>31403 setgid32(0)                       = -1 EPERM (Operation not permitted)
>31403 setresgid32(-1, 0, -1)            = -1 EPERM (Operation not permitted)
>31403 getgid32()                        = 22
>31403 getegid32()                       = 22
>31403 setuid32(0)                       = -1 EPERM (Operation not permitted)
>31403 setresuid32(-1, 0, -1)            = -1 EPERM (Operation not permitted)
>31403 getuid32()                        = 22
>31403 geteuid32()                       = 22
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(3, "\0\0\3\f\n\02417d0\322i\f\253\322[\215n\306\207\211\30\0\0\0~diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,di"..., 784) = 784
>31403 select(4, [3], NULL, NULL, NULL)  = 1 (in [3])
>31403 read(3, "\0\0\3L\6\24\0h\270\231\237b\276\n7\323\1\355\302\234\362\313\0\0\0~diffie-hellman-group-exchange-sha256,diffie-hellman-group-exchange-sha1,diffie-hellman-group14-sha1,di"..., 8192) = 848
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 select(4, [3], NULL, NULL, NULL)  = 1 (in [3])
>31403 read(3, "\0\0\0\24\6\"\0\0\4\0\0\0\4\0\0\0 \0\0\0\0\0\0\0", 8192) = 24
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(4, "\0\0\0\r\0", 5)         = 5
>31403 write(4, "\0\0\4\0\0\0\4\0\0\0 \0", 12 <unfinished ...>
>31402 <... read resumed> "\0\0\0\r", 4) = 4
>31403 <... write resumed> )             = 12
>31402 read(6,  <unfinished ...>
>31403 time(NULL)                        = 1271075522
>31402 <... read resumed> "\0\0\0\4\0\0\0\4\0\0\0 \0", 13) = 13
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31402 time( <unfinished ...>
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31402 <... time resumed> NULL)          = 1271075522
>31403 close(6)                          = 0
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31403 time(NULL)                        = 1271075522
>31402 <... socket resumed> )            = 4
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31402 <... connect resumed> )           = 0
>31403 close(6)                          = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: monitor_read: checking request 0", 73, MSG_NOSIGNAL <unfinished ...>
>31403 time(NULL)                        = 1271075522
>31402 <... send resumed> )              = 73
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31402 close(4 <unfinished ...>
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31402 <... close resumed> )             = 0
>31403 close(6)                          = 0
>31402 time( <unfinished ...>
>31403 read(4,  <unfinished ...>
>31402 <... time resumed> NULL)          = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_answer_moduli: got parameters: 1024 1024 8192", 89, MSG_NOSIGNAL) = 89
>31402 close(4)                          = 0
>31402 open("/etc/ssh/moduli", O_RDONLY|O_LARGEFILE) = 4
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=125811, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fd1000
>31402 read(4, "#    $OpenBSD: moduli,v 1.4 2008/01/01 08:51:20 dtucker Exp $\n# Time Type Tests Tries Size Generator Modulus\n20060827013849 2 6 "..., 4096) = 4096
>31402 read(4, "A50E72E1C785411EDD28DE26D48C73\n20060827014527 2 6 100 1023 5 DE49FC9069994C379D2B6563EFD37EFAE6785EEB1DD0A12B090AAC272B22DF8C64A"..., 4096) = 4096
>31402 read(4, "D2B6563EFD37EFAE6785EEB1DD0A12B090AAC272B22DF8C64A4A2AB7B99CE0B77A9A52E0833D52D53B258CEDFFD175DC8A3766A9B9807362646DC9215628C3F4"..., 4096) = 4096
>31402 read(4, "D53B258CEDFFD175DC8A3766A9B9807362646DC9215628C3F4AF0E08D00AB60A3B9E55BAE47E82651DA0C15A27355DDB06365CAE1DDDE4C0C97DC9942FD65E98"..., 4096) = 4096
>31402 read(4, "B6C2B86079C3D0A4EB0DA149E7B2CAC0AC254FFBCD82DF11D74A4E0BBE3FA0AD0675B8A3C6E794E943B7F3799BA8C0F80D602F85D3032D206A96EB16DAFD2C03"..., 4096) = 4096
>31402 read(4, "25F4EF84DD1F42C6DCC5E313D64DE5B658682A51785102358771DDB6C2B86079C3D0A4EB0DA149E7B2CAC0AC254FFBCD82DF11D74A4E0BBE3FA0AD0675B8A3C6"..., 4096) = 4096
>31402 read(4, "A531708540B7EA03875E5DF4935ED021F3955D5C941BB682DBDA5425F4EF84DD1F42C6DCC5E313D64DE5B658682A51785102358771DDB6C2B86079C3D0A4EB0D"..., 4096) = 4096
>31402 read(4, "14276CEB61FE3A2CB8D77FFE3B9A067505205BBA8353847FD2EA1E2471E4294862A5D4C4F9A2B80F9DA0619327CDBF2EB608B0B5549294A955972AA3512821B2"..., 4096) = 4096
>31402 read(4, "D1E5A8EA7711A8FF57EC7C4C081B47FAB0C2E9FA468E70DD6700F3412224890D5E99527A596CE635195F3A6D35E563BF4892DF2C79C809704411018D919102D1"..., 4096) = 4096
>31402 read(4, "FD2EA1E2471E4294862A5D4C4F9A2B80F9DA0619327CDBF2EB608B0B5549294A955972AA3512821B24782DD8AB97B53AAB04B48180394ABFBC4DCF9B819FC0CB"..., 4096) = 4096
>31402 read(4, "D6700F3412224890D5E99527A596CE635195F3A6D35E563BF4892DF2C79C809704411018D919102D12CB112CE1E66EBF5DB9F409F6C82A6A6E1E21E23532CCB5"..., 4096) = 4096
>31402 read(4, "2EB608B0B5549294A955972AA3512821B24782DD8AB97B53AAB04B48180394ABFBC4DCF9B819FC0CB5AC1275AC5F16EC378163501E4B27D49C67F660333888F1"..., 4096) = 4096
>31402 read(4, "A271B7440EC7687C31DE63355DA7FEAC15DC962C7BF7614EB59B077B9889AD8703DFE98AC99615B722A0ABE89956D1058E025C7733420CB51D7E1608EFF2C0A3"..., 4096) = 4096
>31402 read(4, "C7733420CB51D7E1608EFF2C0A30C9A5EB77CCA02C6B00CE781B172001C6C458630890062E27CE307D513A7686A69D1D548DE8334B13136D9E842A5E17FD6752"..., 4096) = 4096
>31402 read(4, "8334B13136D9E842A5E17FD67522C93823E03F08AEE8024AF5D88B2EE01D4D9980084F62B17EB\n20060828043230 2 6 100 3071 5 D3230D237572ECE9F923"..., 4096) = 4096
>31402 read(4, "3071 2 D3230D237572ECE9F92358715EBAC3A4D89F2D6B4DC39F056450263BEF1665FBD7B93916ABC867B7064802159D273C7EB01C5F9281A3D6DCCB7CF997D"..., 4096) = 4096
>31402 read(4, "7EB01C5F9281A3D6DCCB7CF997D385998EC0E1FA3319AFE771A90ADBACEB414A020630D7C7F161FAFEC6C9FC06D3205C712AAE8848A1B2C21DFF301C7FFC0B75"..., 4096) = 4096
>31402 read(4, "E8848A1B2C21DFF301C7FFC0B75D13F060A313C32AFEEAF1493F641760EBEF38829B3371699D2A3264D0ECEB4E5C19581ED8C57699F559B9828BBFE147952E28"..., 4096) = 4096
>31402 read(4, "C24993D486C2B9A3C63FFCB3F230E7185F163C1EED434C24EE11EAC5B2369FEAF790523BD8BF7E8F9C87467ED6C89E5596974DCA6960E537259EA3AA587BF519"..., 4096) = 4096
>31402 read(4, "8B59B95408F31FB50073AD54B03F97113E61BE577E76D13AA971BA82CEE621C31C4770A7E076245A16689A9FE3E9190FB617FB330AA70AAC623B447D1858C249"..., 4096) = 4096
>31402 read(4, "B11AB206738C71B5FB2FCC4041927B40B985282795A89EF66BDB111E1D07D790AC487DA5841B66FC407ED5DD8612703136422C442139C12040CE776FEB6C8B59"..., 4096) = 4096
>31402 read(4, "578EE592E5D92F\n20060901210250 2 6 100 4095 2 DA110847314B537539F2A20681212A0B2ED264BF1F2595B817CC516D5AA4211585948B248F77277B11A"..., 4096) = 4096
>31402 read(4, "750EDCECEEEC223EAEA78511CB3C0130043950478737FDF6D56EA2B705D5E4C57701E955A9C862DBCAF36D0624D2F2C20616AA3E0478A4A722BBA577BC02578E"..., 4096) = 4096
>31402 read(4, "93CCED157C3C3F74258D5607B6B8AA330DECCF42A73A6F81D300BAFCA921BAFF635DFC90824938F7454B258C1967FF90C1D828E028F9FA86AA7B287A87EC750E"..., 4096) = 4096
>31402 read(4, "ED319009DE6DBF2A5C7C87A93DEB04CCD9147EF8C9BEC2FD713793E4F0BF8C4EFCEBFBF95D555E523AB5D742808C4E425979A1C216C8CB2B42C7715B8CA5907E"..., 4096) = 4096
>31402 read(4, "EDB618912E4FE36B81B80CDA4D497959DBFAEE929317A66BE64A328BAB6183EA5A5CBB3581490B4B613B225ADD00EFD38540356E0F4716229CDDB260283AF044"..., 4096) = 4096
>31402 read(4, "DBA1081E3A018E0D0B55DF33ECAE104909DC74F1CA2256CFD423A859B0AC2112A0AE684396C0029AD07D0D30AC84FFD2C2E80B74DE29310FCAFE7D0CB8864729"..., 4096) = 4096
>31402 read(4, "0115B3E1A984D1D73D9D02AD69C3A1AF90EC915DE6FC9F574BD755B2EF6BBE62F3717E128DC797A06FE35C1C28CED57A0F64F61A4439ACFE7A7B95A1A948417A"..., 4096) = 4096
>31402 read(4, "97D2AF609D3FFF874D14582FA8FF21027DEC92844BD22A9A7EC14C66BCC8DB1E058B95AF87ACB60A5725767A76C9185744E483BCCD9278ED9FF15A04061D0F6E"..., 4096) = 4096
>31402 read(4, "B2B42C7715B8CA5907E84E6FBC35DA7BFBFC892870B659C882C6E3697E0DCC6C24771F26D51A890786DA516DBC2D161680B134F1715B32F734E667650398EC22"..., 4096) = 4096
>31402 read(4, "A4BC218FC9A9E660BF7EB14D300F4199C04B24725405AFA6535DF0837FEF33C0F8B57B9BDFFB1D956E7B40E822FF40603FB5417523B115FE5864094001CEF252"..., 4096) = 2931
>31402 read(4, "", 4096)                 = 0
>31402 _llseek(4, 0, [0], SEEK_SET)      = 0
>31402 read(4, "#    $OpenBSD: moduli,v 1.4 2008/01/01 08:51:20 dtucker Exp $\n# Time Type Tests Tries Size Generator Modulus\n20060827013849 2 6 "..., 4096) = 4096
>31402 read(4, "A50E72E1C785411EDD28DE26D48C73\n20060827014527 2 6 100 1023 5 DE49FC9069994C379D2B6563EFD37EFAE6785EEB1DD0A12B090AAC272B22DF8C64A"..., 4096) = 4096
>31402 read(4, "D2B6563EFD37EFAE6785EEB1DD0A12B090AAC272B22DF8C64A4A2AB7B99CE0B77A9A52E0833D52D53B258CEDFFD175DC8A3766A9B9807362646DC9215628C3F4"..., 4096) = 4096
>31402 close(4)                          = 0
>31402 munmap(0xb7fd1000, 4096)          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_send entering: type 1", 73, MSG_NOSIGNAL) = 73
>31402 close(4)                          = 0
>31402 write(6, "\0\0\0\214\1", 5)       = 5
>31403 <... read resumed> "\0\0\0\214", 4) = 4
>31403 read(4,  <unfinished ...>
>31402 write(6, "\1\0\0\0\201\0\336I\374\220i\231L7\235+ec\357\323~\372\346x^\353\35\320\241+\t\n\254'+\"\337\214d\244\242\253{\231\316\vw\251\245.\0103\325-S\262X\316\337\375\27]\310\243vj\233\230\0076&F\334\222\25b\214?J\360\340\215\0\253`\243\271\345[\256G\350&Q\332\f\25\242sU\335\260ce\312\341\335\336L\f\227\334\231B\375e\351\206\177\245\16r\341\307\205A\36\335"..., 139 <unfinished ...>
>31403 <... read resumed> "\1\1\0\0\0\201\0\336I\374\220i\231L7\235+ec\357\323~\372\346x^\353\35\320\241+\t\n\254'+\"\337\214d\244\242\253{\231\316\vw\251\245.\0103\325-S\262X\316\337\375\27]\310\243vj\233\230\0076&F\334\222\25b\214?J\360\340\215\0\253`\243\271\345[\256G\350&Q\332\f\25\242sU\335\260ce\312\341\335\336L\f\227\334\231B\375e\351\206\177\245\16r\341\307\205A\36"..., 140) = 140
>31402 <... write resumed> )             = 139
>31403 time( <unfinished ...>
>31402 time( <unfinished ...>
>31403 <... time resumed> NULL)          = 1271075522
>31402 <... time resumed> NULL)          = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31403 <... socket resumed> )            = 6
>31402 <... socket resumed> )            = 4
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31403 <... connect resumed> )           = -1 ENOENT (No such file or directory)
>31402 <... connect resumed> )           = 0
>31403 close(6 <unfinished ...>
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug2: monitor_read: 0 used once, disabling now", 81, MSG_NOSIGNAL <unfinished ...>
>31403 <... close resumed> )             = 0
>31402 <... send resumed> )              = 81
>31403 time( <unfinished ...>
>31402 close(4 <unfinished ...>
>31403 <... time resumed> NULL)          = 1271075522
>31402 <... close resumed> )             = 0
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31402 time( <unfinished ...>
>31403 <... socket resumed> )            = 6
>31402 <... time resumed> NULL)          = 1271075522
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31403 <... connect resumed> )           = -1 ENOENT (No such file or directory)
>31402 <... socket resumed> )            = 4
>31403 close(6 <unfinished ...>
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31403 <... close resumed> )             = 0
>31402 <... connect resumed> )           = 0
>31403 write(3, "\0\0\0\224\10\37\0\0\0\201\0\336I\374\220i\231L7\235+ec\357\323~\372\346x^\353\35\320\241+\t\n\254'+\"\337\214d\244\242\253{\231\316\vw\251\245.\0103\325-S\262X\316\337\375\27]\310\243vj\233\230\0076&F\334\222\25b\214?J\360\340\215\0\253`\243\271\345[\256G\350&Q\332\f\25\242sU\335\260ce\312\341\335\336L\f\227\334\231B\375e\351\206\177\245\16r\341"..., 152 <unfinished ...>
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_receive entering", 68, MSG_NOSIGNAL <unfinished ...>
>31403 <... write resumed> )             = 152
>31402 <... send resumed> )              = 68
>31403 time( <unfinished ...>
>31402 close(4 <unfinished ...>
>31403 <... time resumed> NULL)          = 1271075522
>31402 <... close resumed> )             = 0
>31403 time( <unfinished ...>
>31402 read(6,  <unfinished ...>
>31403 <... time resumed> NULL)          = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 select(4, [3], NULL, NULL, NULL)  = 1 (in [3])
>31403 read(3, "\0\0\0\214\6 \0\0\0\200T\3369\353Y3\324\2475<r\366\213]\16\n\30f\202\334\303uc50\27`\201/\222\270\314\357y-\237\321\262\207\352\311\305\3\330\23F\271a\vJ\357+|\361\225\263\\\365\207A8em\365H\t\27\\6\361G\341\326\331.\222Gf\350\270\355\r\213\332g\364Z(z.\226\0345k\311\301<\224\332\360;\363t\353_Q\361/\16\32R\256\232\342\331\304\270z"..., 8192) = 144
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(4, "\0\0\0)\4", 5)          = 5
>31403 write(4, "\0\0\0\0\0\0\0 \352Y\351\265\233\314\365\240\327\315\36\370z)V\"\314\324\343\236I,\224\373@\205\307\325\357\305#L", 40) = 40
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31402 <... read resumed> "\0\0\0)", 4)  = 4
>31402 read(6, "\4\0\0\0\0\0\0\0 \352Y\351\265\233\314\365\240\327\315\36\370z)V\"\314\324\343\236I,\224\373@\205\307\325\357\305#L", 41) = 41
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: monitor_read: checking request 4", 73, MSG_NOSIGNAL) = 73
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_answer_sign", 55, MSG_NOSIGNAL) = 55
>31402 close(4)                          = 0
>31403 <... connect resumed> )           = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 read(4,  <unfinished ...>
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_answer_sign: signature 0x80c28c8(271)", 81, MSG_NOSIGNAL) = 81
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_send entering: type 5", 73, MSG_NOSIGNAL) = 73
>31402 close(4)                          = 0
>31402 write(6, "\0\0\1\24\5", 5)        = 5
>31402 write(6, "\0\0\1\17\0\0\0\7ssh-rsa\0\0\1\0N%\310\34\325\357W\3658|W\311a\264\375\210E\362=\364p\31\201\"\355\r\205\246\30\3141%\351\314\375N=\244\214\335\20\270\247}\31\314\n\344\317E\30\316\223O\246\2073\313\325\267\236\271mR\23\211v\330W\26\363&\200&\375\261\351f\r\tx>\330d.Y\307\224\4\260\375q\323\214\02631#L\270J\303}\241\345\300\27\240\5"..., 275) = 275
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug2: monitor_read: 4 used once, disabling now", 81, MSG_NOSIGNAL) = 81
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_receive entering", 68, MSG_NOSIGNAL) = 68
>31402 close(4)                          = 0
>31402 read(6,  <unfinished ...>
>31403 <... read resumed> "\0\0\1\24", 4) = 4
>31403 read(4, "\5\0\0\1\17\0\0\0\7ssh-rsa\0\0\1\0N%\310\34\325\357W\3658|W\311a\264\375\210E\362=\364p\31\201\"\355\r\205\246\30\3141%\351\314\375N=\244\214\335\20\270\247}\31\314\n\344\317E\30\316\223O\246\2073\313\325\267\236\271mR\23\211v\330W\26\363&\200&\375\261\351f\r\tx>\330d.Y\307\224\4\260\375q\323\214\02631#L\270J\303}\241\345\300\27\240"..., 276) = 276
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(3, "\0\0\2\274\n!\0\0\1\25\0\0\0\7ssh-rsa\0\0\0\1#\0\0\1\1\0\226mU\224\17\372Z\347\0072\344~\376\4\257\372&\317\226\370\25\16v6\n9A\22J6hj\271\201\377\5.\333\354\345\246\215\264x\207AO\203S@'v0\340<\2529]\225\314\3174\213]\t\336\357\260Y=\251t\253`\352\35\307\360[\327\365\326\36\310\215@\312Phq\25&&\37\313\v\310"..., 720) = 720
>31403 select(4, [3], NULL, NULL, NULL)  = 1 (in [3])
>31403 read(3, "\0\0\0\f\n\25\0\0\0\0\0\0\0\0\0\0", 8192) = 16
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 select(4, [3], NULL, NULL, NULL)  = 1 (in [3])
>31403 read(3, "J\314dviz\0\340\24\0^\2748\10\263W#\\\376c\207\312u\243\366\364\202\254b\335h!\327\264\226\267\r\231=\320f\315\232[\7*\223\357", 8192) = 48
>31403 write(3, "\324\300\0\2404\246\220P\214\3037\226\352\5\20\244RK\177W\202\276\242\241\360\"z \ns\26\300\23\177\3322\244\275\220\24\345ga\260\3666\225\334", 48) = 48
>31403 select(4, [3], NULL, NULL, NULL)  = 1 (in [3])
>31403 read(3, "\26\255B\10\314\367Xi\\\217s\262\260\227\251{\33\16)/s\304\261\272\343\272v\24+\31\340J\3128Q\24\275C(\330\346\264\213\326\314\377\0Z\332\337)/+\366\f'(\352\317\"\364\204\216\30", 8192) = 64
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(4, "\0\0\0\v\6", 5)         = 5
>31403 write(4, "\0\0\0\6testik", 10)    = 10
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 read(4,  <unfinished ...>
>31402 <... read resumed> "\0\0\0\v", 4) = 4
>31402 read(6, "\6\0\0\0\6testik", 11)   = 11
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: monitor_read: checking request 6", 73, MSG_NOSIGNAL) = 73
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_answer_pwnamallow", 61, MSG_NOSIGNAL) = 61
>31402 close(4)                          = 0
>31402 getpeername(3, {sa_family=AF_INET, sin_port=htons(47546), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31402 open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 4
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=5681, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fd1000
>31402 read(4, "# /etc/protocols\n#\n# Internet (IP) protocols definition file\n#\n# See protocols(5) for more info\n# See also http://www.iana.org/a"..., 4096) = 4096
>31402 close(4)                          = 0
>31402 munmap(0xb7fd1000, 4096)          = 0
>31402 getsockopt(3, SOL_IP, IP_OPTIONS, "", [0]) = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: Trying to reverse map address 192.168.0.108.", 85, MSG_NOSIGNAL) = 85
>31402 close(4)                          = 0
>31402 socket(PF_FILE, SOCK_STREAM|0x80800 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
>31402 close(4)                          = 0
>31402 socket(PF_FILE, SOCK_STREAM|0x80800 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
>31402 close(4)                          = 0
>31402 open("/etc/resolv.conf", O_RDONLY) = 4
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=139, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fd1000
>31402 read(4, "search intra\n#nameserver 160.217.1.10\n#nameserver 212.80.66.7\n#nameserver 192.168.0.252\n#nameserver 192.168.0.253\nnameserver 192"..., 4096) = 139
>31402 read(4, "", 4096)                 = 0
>31402 close(4)                          = 0
>31402 munmap(0xb7fd1000, 4096)          = 0
>31402 open("/etc/host.conf", O_RDONLY)  = 4
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=936, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fd1000
>31402 read(4, "# /etc/host.conf:\n# $Header: /var/cvsroot/gentoo/src/patchsets/glibc/extra/etc/host.conf,v 1.1 2006/09/29 23:52:23 vapier Exp $\n"..., 4096) = 936
>31402 read(4, "", 4096)                 = 0
>31402 close(4)                          = 0
>31402 munmap(0xb7fd1000, 4096)          = 0
>31402 open("/etc/hosts", O_RDONLY|O_CLOEXEC) = 4
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=1522, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fd1000
>31402 read(4, "# /etc/hosts: Local Host Database\n#\n# This file describes a number of aliases-to-address mappings for the for \n# local hosts tha"..., 4096) = 1522
>31402 close(4)                          = 0
>31402 munmap(0xb7fd1000, 4096)          = 0
>31402 socket(PF_NETLINK, SOCK_RAW, 0)   = 4
>31402 bind(4, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
>31402 getsockname(4, {sa_family=AF_NETLINK, pid=31402, groups=00000000}, [12]) = 0
>31402 time(NULL)                        = 1271075522
>31402 sendto(4, "\24\0\0\0\26\0\1\3\302\22\303K\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
>31402 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"8\0\0\0\24\0\2\0\302\22\303K\252z\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1\10\0\2\0\177\0\0\1\10\0\4\0\177\377\377\377\7\0\3\0lo\0\0<\0\0\0\24\0\2\0\302\22\303K\252z\0\0\2\30\200\0\3\0\0\0\10\0\1\0\300\250\0l\10\0\2\0\300\250\0l\10\0\4\0\300\250\0\377\t\0\3\0eth0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 116
>31402 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\302\22\303K\252z\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0@\0\0\0\24\0\2\0\302\22\303K\252z\0\0\n@\200\375\3\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\2\34\300\377\3764\234\340\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
>31402 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\302\22\303K\252z\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0@\0\0\0\24\0\2\0\302\22\303K\252z\0\0\n@\200\375\3\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\2\34\300\377\3764\234\340\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
>31402 close(4)                          = 0
>31402 socket(PF_NETLINK, SOCK_RAW, 0)   = 4
>31402 bind(4, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
>31402 getsockname(4, {sa_family=AF_NETLINK, pid=31402, groups=00000000}, [12]) = 0
>31402 time(NULL)                        = 1271075522
>31402 sendto(4, "\24\0\0\0\26\0\1\3\302\22\303K\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
>31402 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"8\0\0\0\24\0\2\0\302\22\303K\252z\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1\10\0\2\0\177\0\0\1\10\0\4\0\177\377\377\377\7\0\3\0lo\0\0<\0\0\0\24\0\2\0\302\22\303K\252z\0\0\2\30\200\0\3\0\0\0\10\0\1\0\300\250\0l\10\0\2\0\300\250\0l\10\0\4\0\300\250\0\377\t\0\3\0eth0\0\0\0\0\377\377\377\377\365\n\0\0\365\n\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 116
>31402 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\302\22\303K\252z\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0@\0\0\0\24\0\2\0\302\22\303K\252z\0\0\n@\200\375\3\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\2\34\300\377\3764\234\340\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
>31402 recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\302\22\303K\252z\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0@\0\0\0\24\0\2\0\302\22\303K\252z\0\0\n@\200\375\3\0\0\0\24\0\1\0\376\200\0\0\0\0\0\0\2\34\300\377\3764\234\340\24\0\6\0\377\377\377\377\377\377\377\377\365\n\0\0\365\n\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 stat64("/etc/resolv.conf", {st_mode=S_IFREG|0644, st_size=139, ...}) = 0
>31402 open("/etc/resolv.conf", O_RDONLY) = 4
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=139, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fd1000
>31402 read(4, "search intra\n#nameserver 160.217.1.10\n#nameserver 212.80.66.7\n#nameserver 192.168.0.252\n#nameserver 192.168.0.253\nnameserver 192"..., 4096) = 139
>31402 read(4, "", 4096)                 = 0
>31402 close(4)                          = 0
>31402 munmap(0xb7fd1000, 4096)          = 0
>31402 open("/etc/hosts", O_RDONLY|O_CLOEXEC) = 4
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=1522, ...}) = 0
>31402 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7fd1000
>31402 read(4, "# /etc/hosts: Local Host Database\n#\n# This file describes a number of aliases-to-address mappings for the for \n# local hosts tha"..., 4096) = 1522
>31402 close(4)                          = 0
>31402 munmap(0xb7fd1000, 4096)          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug2: parse_server_config: config reprocess config len 241", 93, MSG_NOSIGNAL) = 93
>31402 close(4)                          = 0
>31402 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 4
>31402 _llseek(4, 0, [0], SEEK_CUR)      = 0
>31402 fstat64(4, {st_mode=S_IFREG|0644, st_size=2735, ...}) = 0
>31402 mmap2(NULL, 2735, PROT_READ, MAP_SHARED, 4, 0) = 0xb7fd1000
>31402 _llseek(4, 2735, [2735], SEEK_SET) = 0
>31402 munmap(0xb7fd1000, 2735)          = 0
>31402 close(4)                          = 0
>31402 open("/etc/shadow", O_RDONLY|O_CLOEXEC) = 4
>31402 _llseek(4, 0, [0], SEEK_CUR)      = 0
>31402 fstat64(4, {st_mode=S_IFREG|0600, st_size=1553, ...}) = 0
>31402 mmap2(NULL, 1553, PROT_READ, MAP_SHARED, 4, 0) = 0xb7fd1000
>31402 _llseek(4, 1553, [1553], SEEK_SET) = 0
>31402 munmap(0xb7fd1000, 1553)          = 0
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: auth_shadow_acctexpired: today 14711 sp_expire -1 days left -14712", 107, MSG_NOSIGNAL) = 107
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: account expiration disabled", 68, MSG_NOSIGNAL) = 68
>31402 close(4)                          = 0
>31402 stat64("/usr/local/sbin/scponlyc", {st_mode=S_IFREG|S_ISUID|0711, st_size=18260, ...}) = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_answer_pwnamallow: sending MONITOR_ANS_PWNAM: 1", 91, MSG_NOSIGNAL) = 91
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_send entering: type 7", 73, MSG_NOSIGNAL) = 73
>31402 close(4)                          = 0
>31402 write(6, "\0\0-\211\7", 5)        = 5
>31402 write(6, "\1\0\0\0\0340\220\v\10@\220\v\10\364\3\0\0\370\3\0\0P\220\v\10`\220\v\10x\220\v\10\0\0\0\6testik\0\0\0\1*\0\0\0\0\0\0\0\f/home/testik\0\0\0\30/usr/local/sbin/scponlyc\0\0-$\1\0\0\0\0\0\0\0\26\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 11656) = 11656
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug2: monitor_read: 6 used once, disabling now", 81, MSG_NOSIGNAL) = 81
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_receive entering", 68, MSG_NOSIGNAL) = 68
>31402 close(4)                          = 0
>31402 read(6,  <unfinished ...>
>31403 <... read resumed> "\0\0-\211", 4) = 4
>31403 read(4, "\7\1\0\0\0\0340\220\v\10@\220\v\10\364\3\0\0\370\3\0\0P\220\v\10`\220\v\10x\220\v\10\0\0\0\6testik\0\0\0\1*\0\0\0\0\0\0\0\f/home/testik\0\0\0\30/usr/local/sbin/scponlyc\0\0-$\1\0\0\0\0\0\0\0\26\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 11657) = 11657
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(4, "\0\0\0\27\3", 5)        = 5
>31403 write(4, "\0\0\0\16ssh-connection\0\0\0\0", 22) = 22
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(4, "\0\0\0\5\n", 5)         = 5
>31403 write(4, "\0\0\0\0", 4)           = 4
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 read(4,  <unfinished ...>
>31402 <... read resumed> "\0\0\0\27", 4) = 4
>31402 read(6, "\3\0\0\0\16ssh-connection\0\0\0\0", 23) = 23
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: monitor_read: checking request 3", 73, MSG_NOSIGNAL) = 73
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_answer_authserv: service=ssh-connection, style=", 91, MSG_NOSIGNAL) = 91
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug2: monitor_read: 3 used once, disabling now", 81, MSG_NOSIGNAL) = 81
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_receive entering", 68, MSG_NOSIGNAL) = 68
>31402 close(4)                          = 0
>31402 read(6, "\0\0\0\5", 4)            = 4
>31402 read(6, "\n\0\0\0\0", 5)          = 5
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: monitor_read: checking request 10", 74, MSG_NOSIGNAL) = 74
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_answer_authpassword: sending result 0", 81, MSG_NOSIGNAL) = 81
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_send entering: type 11", 74, MSG_NOSIGNAL) = 74
>31402 close(4)                          = 0
>31402 write(6, "\0\0\0\5\v", 5)         = 5
>31402 write(6, "\0\0\0\0", 4)           = 4
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<38>Apr 12 14:32:02 sshd[31402]: Failed none for testik from 192.168.0.108 port 47546 ssh2", 90, MSG_NOSIGNAL) = 90
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075522
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:02 sshd[31402]: debug3: mm_request_receive entering", 68, MSG_NOSIGNAL) = 68
>31402 close(4)                          = 0
>31402 read(6,  <unfinished ...>
>31403 <... read resumed> "\0\0\0\5", 4) = 4
>31403 read(4, "\v\0\0\0\0", 5)          = 5
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(3, "\17\242\32f.\211=\342\377\346\237\345\275\203\260hVM\203mEf\246\4\364\226\2\334\337-\233Mg!\267\376\325B\35\241\264\361\337\303E{\233;\3111\311-\244\274\227/\317\205\306T\215\316\305\235\305B\257\33\23\37\360\321<A\264\215*\273*q", 80) = 80
>31403 select(4, [3], NULL, NULL, NULL)  = 1 (in [3])
>31403 read(3, "%\36\270\204qh\30153\n\306pcS\311o\225\357\225%\0Eo\251\20s\272\323(\327\20\362\244Z\302\3714|\356u/\307\377\357GI\20\257\351\237\340\273W\35>P a2\256R\27n\201d\300E\236)\347\274\244\30\375!\23\3340v\331\365ri.\205*\277\355\315\310\340r\251\323\376\\", 8192) = 96
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075522
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(3, "|3\7\261w\324=\201M7\325\353\224\v\304%\215\202%px\353T\277\342!\213\327\4_\337\367N\4\23\253m\307\364V\272\17(\n\366\302\373\241&\362|\17\330widA8\200\233\216T\340\312&\334\341$\1\345\360j\201\241<\356\36\354\333\251", 80) = 80
>31403 select(4, [3], NULL, NULL, NULL)  = 1 (in [3])
>31403 read(3, "\27\274$\232*_H\34d\327\326\245\210d\353h|n\377\362\264~v\372S\234\230 'rZ\206\22\"\227D\255\213\27[Kh\251\260\366\1\333Su\245%\337\233\7x\274\37\33v\314|\257pV\374\333\230\205\17\235?\273b'\206\343\t,\351\17\362n\260\201\321\276\22A\253WNy\204^\211;\32\352\201\1\337\241\20?\327\220\375C\0\254B\2168\274\177G@\301\24\224b\363\\#\20\340\220:"..., 8192) = 144
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(4, "\0\0\0\v\n", 5)         = 5
>31403 write(4, "\0\0\0\6unreal", 10)    = 10
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 read(4,  <unfinished ...>
>31402 <... read resumed> "\0\0\0\v", 4) = 4
>31402 read(6, "\n\0\0\0\6unreal", 11)   = 11
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: monitor_read: checking request 10", 74, MSG_NOSIGNAL) = 74
>31402 close(4)                          = 0
>31402 open("/etc/shadow", O_RDONLY|O_CLOEXEC) = 4
>31402 _llseek(4, 0, [0], SEEK_CUR)      = 0
>31402 fstat64(4, {st_mode=S_IFREG|0600, st_size=1553, ...}) = 0
>31402 mmap2(NULL, 1553, PROT_READ, MAP_SHARED, 4, 0) = 0xb7fd1000
>31402 _llseek(4, 1553, [1553], SEEK_SET) = 0
>31402 munmap(0xb7fd1000, 1553)          = 0
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: auth_shadow_pwexpired: today 14711 sp_lstchg 14711 sp_max 99999", 104, MSG_NOSIGNAL) = 104
>31402 close(4)                          = 0
>31402 open("/etc/shadow", O_RDONLY|O_CLOEXEC) = 4
>31402 _llseek(4, 0, [0], SEEK_CUR)      = 0
>31402 fstat64(4, {st_mode=S_IFREG|0600, st_size=1553, ...}) = 0
>31402 mmap2(NULL, 1553, PROT_READ, MAP_SHARED, 4, 0) = 0xb7fd1000
>31402 _llseek(4, 1553, [1553], SEEK_SET) = 0
>31402 munmap(0xb7fd1000, 1553)          = 0
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_answer_authpassword: sending result 1", 81, MSG_NOSIGNAL) = 81
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_request_send entering: type 11", 74, MSG_NOSIGNAL) = 74
>31402 close(4)                          = 0
>31402 write(6, "\0\0\0\5\v", 5)         = 5
>31402 write(6, "\0\0\0\1", 4)           = 4
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<38>Apr 12 14:32:04 sshd[31402]: Accepted password for testik from 192.168.0.108 port 47546 ssh2", 96, MSG_NOSIGNAL) = 96
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug1: monitor_child_preauth: testik has been authenticated by privileged process", 115, MSG_NOSIGNAL) = 115
>31402 close(4)                          = 0
>31402 time( <unfinished ...>
>31403 <... read resumed> "\0\0\0\5", 4) = 4
>31403 read(4, "\v\0\0\0\1", 5)          = 5
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(3, "\215\304\27\271\36C#\245\205#\354\316\324\212\366\333/E\302\331\317\314w\31h\352]\261y0\234=", 32) = 32
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 write(4, "\0\0\5'\30", 5)         = 5
>31403 write(4, "\0\0\0 \352Y\351\265\233\314\365\240\327\315\36\370z)V\"\314\324\343\236I,\224\373@\205\307\325\357\305#L\0\0\0\20\0\0\0\1\0\0\0\3\0\0\3\00017d0\322i\f\253\322[\215n\306\207\211\30\0\0\0~diffie-hellman-group-exchange-sha256,diffie-hellman-grou"..., 1318) = 1318
>31403 time(NULL)                        = 1271075524
>31403 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31403 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = -1 ENOENT (No such file or directory)
>31403 close(6)                          = 0
>31403 exit_group(0)                     = ?
>31402 <... time resumed> NULL)          = 1271075524
>31402 --- SIGCHLD (Child exited) @ 0 (0) ---
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_get_keystate: Waiting for new keys", 78, MSG_NOSIGNAL) = 78
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_request_receive_expect entering: type 24", 84, MSG_NOSIGNAL) = 84
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_request_receive entering", 68, MSG_NOSIGNAL) = 68
>31402 close(4)                          = 0
>31402 read(6, "\0\0\5'", 4)             = 4
>31402 read(6, "\30\0\0\0 \352Y\351\265\233\314\365\240\327\315\36\370z)V\"\314\324\343\236I,\224\373@\205\307\325\357\305#L\0\0\0\20\0\0\0\1\0\0\0\3\0\0\3\00017d0\322i\f\253\322[\215n\306\207\211\30\0\0\0~diffie-hellman-group-exchange-sha256,diffie-hellman-gro"..., 1319) = 1319
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_newkeys_from_blob: 0x80baf40(118)", 77, MSG_NOSIGNAL) = 77
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug2: mac_setup: found hmac-md5", 66, MSG_NOSIGNAL) = 66
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_get_keystate: Waiting for second key", 80, MSG_NOSIGNAL) = 80
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_newkeys_from_blob: 0x80baf40(118)", 77, MSG_NOSIGNAL) = 77
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug2: mac_setup: found hmac-md5", 66, MSG_NOSIGNAL) = 66
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_get_keystate: Getting compression state", 83, MSG_NOSIGNAL) = 83
>31402 close(4)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_get_keystate: Getting Network I/O buffers", 85, MSG_NOSIGNAL) = 85
>31402 close(4)                          = 0
>31402 close(6)                          = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_share_sync: Share sync", 66, MSG_NOSIGNAL) = 66
>31402 close(4)                          = 0
>31402 mmap2(NULL, 1310720, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_ANONYMOUS, -1, 0) = 0xb79be000
>31402 munmap(0xb7fd2000, 65536)         = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_share_sync: Share sync end", 70, MSG_NOSIGNAL) = 70
>31402 close(4)                          = 0
>31402 waitpid(31403, [{WIFEXITED(s) && WEXITSTATUS(s) == 0}], 0) = 31403
>31402 alarm(0)                          = 118
>31402 rt_sigaction(SIGALRM, NULL, {0x804e1b0, [], SA_INTERRUPT}, 8) = 0
>31402 rt_sigaction(SIGALRM, {SIG_DFL, [], SA_INTERRUPT}, NULL, 8) = 0
>31402 close(5)                          = 0
>31402 socketpair(PF_FILE, SOCK_STREAM, 0, [4, 5]) = 0
>31402 fcntl64(4, F_SETFD, FD_CLOEXEC)   = 0
>31402 fcntl64(5, F_SETFD, FD_CLOEXEC)   = 0
>31402 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7c5c728) = 31404
>31338 <... select resumed> )            = 1 (in [6])
>31338 close(6 <unfinished ...>
>31404 close(5 <unfinished ...>
>31338 <... close resumed> )             = 0
>31404 <... close resumed> )             = 0
>31338 select(7, [3 4], NULL, NULL, NULL <unfinished ...>
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 6
>31402 connect(6, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(6, "<38>Apr 12 14:32:04 sshd[31402]: User child is on pid 31404", 59, MSG_NOSIGNAL <unfinished ...>
>31404 getuid32()                        = 0
>31402 <... send resumed> )              = 59
>31402 close(6)                          = 0
>31402 close(4)                          = 0
>31402 rt_sigaction(SIGHUP, NULL, {SIG_DFL, [], 0}, 8) = 0
>31402 rt_sigaction(SIGHUP, {0x8067710, [], 0}, NULL, 8) = 0
>31402 rt_sigaction(SIGTERM, NULL,  <unfinished ...>
>31404 setgid32(1016 <unfinished ...>
>31402 <... rt_sigaction resumed> {SIG_DFL, [], 0}, 8) = 0
>31404 <... setgid32 resumed> )          = 0
>31402 rt_sigaction(SIGTERM, {0x8067710, [], 0}, NULL, 8) = 0
>31402 rt_sigaction(SIGINT, NULL, {SIG_DFL, [], 0}, 8) = 0
>31402 rt_sigaction(SIGINT, {0x8067710, [], 0}, NULL, 8) = 0
>31404 open("/proc/sys/kernel/ngroups_max", O_RDONLY <unfinished ...>
>31402 time( <unfinished ...>
>31404 <... open resumed> )              = 5
>31402 <... time resumed> NULL)          = 1271075524
>31404 read(5,  <unfinished ...>
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31404 <... read resumed> "65536\n", 31) = 6
>31402 <... socket resumed> )            = 4
>31404 close(5 <unfinished ...>
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31404 <... close resumed> )             = 0
>31402 <... connect resumed> )           = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug3: mm_request_receive entering", 68, MSG_NOSIGNAL) = 68
>31404 socket(PF_FILE, SOCK_STREAM|0x80800 /* SOCK_??? */, 0 <unfinished ...>
>31402 close(4 <unfinished ...>
>31404 <... socket resumed> )            = 5
>31402 <... close resumed> )             = 0
>31402 read(5,  <unfinished ...>
>31404 connect(5, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
>31404 close(5)                          = 0
>31404 socket(PF_FILE, SOCK_STREAM|0x80800 /* SOCK_??? */, 0) = 5
>31404 connect(5, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
>31404 close(5)                          = 0
>31404 open("/etc/group", O_RDONLY|O_CLOEXEC) = 5
>31404 _llseek(5, 0, [0], SEEK_CUR)      = 0
>31404 fstat64(5, {st_mode=S_IFREG|0644, st_size=1067, ...}) = 0
>31404 mmap2(NULL, 1067, PROT_READ, MAP_SHARED, 5, 0) = 0xb7fe1000
>31404 _llseek(5, 1067, [1067], SEEK_SET) = 0
>31404 fstat64(5, {st_mode=S_IFREG|0644, st_size=1067, ...}) = 0
>31404 munmap(0xb7fe1000, 1067)          = 0
>31404 close(5)                          = 0
>31404 setgroups32(1, [1016])            = 0
>31404 getuid32()                        = 0
>31404 getgid32()                        = 1016
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 5
>31404 connect(5, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(5, "<39>Apr 12 14:32:04 sshd[31404]: debug1: permanently_set_uid: 1012/1016", 71, MSG_NOSIGNAL) = 71
>31404 close(5)                          = 0
>31404 setresgid32(1016, 1016, 1016)     = 0
>31404 setresuid32(1012, 1012, 1012)     = 0
>31404 getgid32()                        = 1016
>31404 getegid32()                       = 1016
>31404 setuid32(0)                       = -1 EPERM (Operation not permitted)
>31404 setresuid32(-1, 0, -1)            = -1 EPERM (Operation not permitted)
>31404 getuid32()                        = 1012
>31404 geteuid32()                       = 1012
>31404 getuid32()                        = 1012
>31404 geteuid32()                       = 1012
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 5
>31404 connect(5, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(5, "<39>Apr 12 14:32:04 sshd[31404]: debug2: set_newkeys: mode 0", 60, MSG_NOSIGNAL) = 60
>31404 close(5)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 5
>31404 connect(5, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(5, "<39>Apr 12 14:32:04 sshd[31404]: debug2: set_newkeys: mode 1", 60, MSG_NOSIGNAL) = 60
>31404 close(5)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 5
>31404 connect(5, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(5, "<39>Apr 12 14:32:04 sshd[31404]: debug1: Entering interactive session for SSH2.", 79, MSG_NOSIGNAL) = 79
>31404 close(5)                          = 0
>31404 rt_sigaction(SIGCHLD, NULL, {SIG_DFL, [], 0}, 8) = 0
>31404 rt_sigaction(SIGCHLD, {0x8058610, [], 0}, NULL, 8) = 0
>31404 pipe([5, 6])                      = 0
>31404 fcntl64(5, F_SETFD, FD_CLOEXEC)   = 0
>31404 fcntl64(6, F_SETFD, FD_CLOEXEC)   = 0
>31404 fcntl64(5, F_GETFL)               = 0 (flags O_RDONLY)
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: fd 5 setting O_NONBLOCK", 64, MSG_NOSIGNAL) = 64
>31404 close(7)                          = 0
>31404 fcntl64(5, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
>31404 fcntl64(6, F_GETFL)               = 0x1 (flags O_WRONLY)
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: fd 6 setting O_NONBLOCK", 64, MSG_NOSIGNAL) = 64
>31404 close(7)                          = 0
>31404 fcntl64(6, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: server_init_dispatch_20", 64, MSG_NOSIGNAL) = 64
>31404 close(7)                          = 0
>31404 select(6, [3 5], [], NULL, NULL)  = 1 (in [3])
>31404 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
>31404 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
>31404 read(3, "+\313\334\202\257@\326\251\7\273\370j\"\3230\0\246>\374\33\246-|\277\205Q\233\305(f%\243\326\366\341Q\341\300\222\2710\372\256\332\3\345%FCk\312\313\330\5o\321\374\232]\4\342\3$\214\265p<\321\265<\26V\277\314J\6\31N\n}\331\337\3469\32\20\311\242&.7\201>\325\217\207I\251H-\253\270\1\246\"~XT\354J\17\275(\206\225]\206t{\262\204!2I4\243h\242", 16384) = 128
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: server_input_channel_open: ctype session rchan 0 win 2097152 max 32768", 111, MSG_NOSIGNAL) = 111
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: input_session_request", 62, MSG_NOSIGNAL) = 62
>31404 close(7)                          = 0
>31404 ioctl(-1, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfafe388) = -1 EBADF (Bad file descriptor)
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: channel 0: new [server-session]", 72, MSG_NOSIGNAL) = 72
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: session_new: allocate (allocated 0 max 10)", 83, MSG_NOSIGNAL) = 83
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug3: session_unused: session id 0 unused", 76, MSG_NOSIGNAL) = 76
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: session_new: session 0", 63, MSG_NOSIGNAL) = 63
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: session_open: channel 0", 64, MSG_NOSIGNAL) = 64
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: session_open: session 0: link with channel 0", 85, MSG_NOSIGNAL) = 85
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: server_input_channel_open: confirm session", 83, MSG_NOSIGNAL) = 83
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: server_input_global_request: rtype no-more-sessions@openssh.com want_reply 0", 117, MSG_NOSIGNAL) = 117
>31404 close(7)                          = 0
>31404 select(6, [3 5], [3], NULL, NULL) = 1 (out [3])
>31404 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
>31404 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
>31404 write(3, "\320c\202\23\10\10\344\200X?;\216N\373.oI\250g+\273\6\315\213<\201\5\325\25\252a*\31\236\\\204\226K\21\241\255\241\233L\22(\321\235", 48) = 48
>31404 select(6, [3 5], [], NULL, NULL)  = 1 (in [3])
>31404 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
>31404 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
>31404 read(3, "E`+hA\371\226P@\335';\31x3\307\266\230\306\355\20\317\20\304c\275\221p\261\207;\376O?\325\252?k\210l\n\327G\266\370\264\35\357\16\266&*_\334\303K\266\\\375Y6\223\3402", 16384) = 64
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: server_input_channel_req: channel 0 request subsystem reply 1", 102, MSG_NOSIGNAL) = 102
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: session_by_channel: session 0 channel 0", 80, MSG_NOSIGNAL) = 80
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: session_input_channel_req: session 0 req subsystem", 91, MSG_NOSIGNAL) = 91
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<38>Apr 12 14:32:04 sshd[31404]: subsystem request for sftp", 59, MSG_NOSIGNAL) = 59
>31404 close(7)                          = 0
>31404 stat64("/usr/lib/misc/sftp-server", {st_mode=S_IFREG|0755, st_size=54928, ...}) = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: subsystem: exec() /usr/lib/misc/sftp-server", 84, MSG_NOSIGNAL) = 84
>31404 close(7)                          = 0
>31404 pipe([7, 8])                      = 0
>31404 pipe([9, 10])                     = 0
>31404 pipe([11, 12])                    = 0
>31404 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb7c5c728) = 31405
>31404 getsockopt(3, SOL_TCP, TCP_NODELAY, [0], [4]) = 0
>31404 time( <unfinished ...>
>31405 setsid()                          = 31405
>31404 <... time resumed> NULL)          = 1271075524
>31405 close(8 <unfinished ...>
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31405 <... close resumed> )             = 0
>31404 <... socket resumed> )            = 13
>31404 connect(13, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31405 dup2(7, 0)                        = 0
>31404 <... connect resumed> )           = 0
>31405 close(7 <unfinished ...>
>31404 send(13, "<39>Apr 12 14:32:04 sshd[31404]: debug2: fd 3 setting TCP_NODELAY", 65, MSG_NOSIGNAL <unfinished ...>
>31405 <... close resumed> )             = 0
>31405 close(9 <unfinished ...>
>31404 <... send resumed> )              = 65
>31405 <... close resumed> )             = 0
>31404 close(13 <unfinished ...>
>31405 dup2(10, 1 <unfinished ...>
>31404 <... close resumed> )             = 0
>31405 <... dup2 resumed> )              = 1
>31404 setsockopt(3, SOL_TCP, TCP_NODELAY, [1], 4 <unfinished ...>
>31405 close(10)                         = 0
>31404 <... setsockopt resumed> )        = 0
>31405 close(11 <unfinished ...>
>31404 getsockname(3,  <unfinished ...>
>31405 <... close resumed> )             = 0
>31404 <... getsockname resumed> {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31405 dup2(12, 2)                       = 2
>31404 setsockopt(3, SOL_IP, IP_TOS, [8], 4 <unfinished ...>
>31405 close(12 <unfinished ...>
>31404 <... setsockopt resumed> )        = 0
>31405 <... close resumed> )             = 0
>31404 close(7)                          = 0
>31404 close(10 <unfinished ...>
>31405 stat64("/etc/nologin",  <unfinished ...>
>31404 <... close resumed> )             = 0
>31405 <... stat64 resumed> 0xbfafdef8)  = -1 ENOENT (No such file or directory)
>31405 getuid32( <unfinished ...>
>31404 close(12 <unfinished ...>
>31405 <... getuid32 resumed> )          = 1012
>31404 <... close resumed> )             = 0
>31405 geteuid32()                       = 1012
>31404 close(11 <unfinished ...>
>31405 getuid32( <unfinished ...>
>31404 <... close resumed> )             = 0
>31405 <... getuid32 resumed> )          = 1012
>31405 geteuid32( <unfinished ...>
>31404 fcntl64(9, F_SETFD, FD_CLOEXEC <unfinished ...>
>31405 <... geteuid32 resumed> )         = 1012
>31404 <... fcntl64 resumed> )           = 0
>31404 fcntl64(8, F_SETFD, FD_CLOEXEC)   = 0
>31405 getsockname(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31404 ioctl(8, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfafe248) = -1 EINVAL (Invalid argument)
>31405 getsockname(3,  <unfinished ...>
>31404 fcntl64(9, F_GETFL <unfinished ...>
>31405 <... getsockname resumed> {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31404 <... fcntl64 resumed> )           = 0 (flags O_RDONLY)
>31405 getsockname(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("192.168.0.108")}, [16]) = 0
>31404 time(NULL)                        = 1271075524
>31405 close(3)                          = 0
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31405 time(NULL)                        = 1271075524
>31404 <... connect resumed> )           = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: fd 9 setting O_NONBLOCK", 64, MSG_NOSIGNAL <unfinished ...>
>31405 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 3
>31404 <... send resumed> )              = 64
>31405 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31404 close(7 <unfinished ...>
>31405 <... connect resumed> )           = 0
>31405 send(3, "<39>Apr 12 14:32:04 sshd[31405]: debug3: channel 0: close_fds r -1 w -1 e -1", 76, MSG_NOSIGNAL <unfinished ...>
>31404 <... close resumed> )             = 0
>31404 fcntl64(9, F_SETFL, O_RDONLY|O_NONBLOCK <unfinished ...>
>31405 <... send resumed> )              = 76
>31405 close(3 <unfinished ...>
>31404 <... fcntl64 resumed> )           = 0
>31405 <... close resumed> )             = 0
>31405 close(3 <unfinished ...>
>31404 fcntl64(8, F_GETFL <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31405 close(4 <unfinished ...>
>31404 <... fcntl64 resumed> )           = 0x1 (flags O_WRONLY)
>31405 <... close resumed> )             = 0
>31404 time( <unfinished ...>
>31405 close(5 <unfinished ...>
>31404 <... time resumed> NULL)          = 1271075524
>31405 <... close resumed> )             = 0
>31405 close(6 <unfinished ...>
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0 <unfinished ...>
>31405 <... close resumed> )             = 0
>31404 <... socket resumed> )            = 7
>31405 close(7 <unfinished ...>
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110 <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31405 close(8 <unfinished ...>
>31404 <... connect resumed> )           = 0
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: fd 8 setting O_NONBLOCK", 64, MSG_NOSIGNAL <unfinished ...>
>31405 close(9)                          = -1 EBADF (Bad file descriptor)
>31404 <... send resumed> )              = 64
>31405 close(10 <unfinished ...>
>31404 close(7 <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31405 close(11 <unfinished ...>
>31404 <... close resumed> )             = 0
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 fcntl64(8, F_SETFL, O_WRONLY|O_NONBLOCK <unfinished ...>
>31405 close(12)                         = -1 EBADF (Bad file descriptor)
>31404 <... fcntl64 resumed> )           = 0
>31405 close(13)                         = -1 EBADF (Bad file descriptor)
>31404 select(10, [3 5 9], [3], NULL, NULL <unfinished ...>
>31405 close(14 <unfinished ...>
>31404 <... select resumed> )            = 1 (out [3])
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 rt_sigprocmask(SIG_BLOCK, [CHLD],  <unfinished ...>
>31405 close(15)                         = -1 EBADF (Bad file descriptor)
>31404 <... rt_sigprocmask resumed> [], 8) = 0
>31405 close(16 <unfinished ...>
>31404 rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31405 close(17 <unfinished ...>
>31404 <... rt_sigprocmask resumed> NULL, 8) = 0
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 write(3, "d\361@\321\337\373V4\346\224\210\220]2\347\231.\377K\310\253LqM\231\313\201q\247\276\303'#'/A\22\355\352U\235\242\221)\226\341T\245\313\344\303j\2570\253/\324hG\331.\270Y\20\214\371\353\17\214\363 \374\207\204\34\230z\303O\224", 80 <unfinished ...>
>31405 close(18 <unfinished ...>
>31404 <... write resumed> )             = 80
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31405 close(19 <unfinished ...>
>31404 select(10, [3 5 9], [], NULL, NULL <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 <... select resumed> )            = 1 (in [3])
>31405 close(20 <unfinished ...>
>31404 rt_sigprocmask(SIG_BLOCK, [CHLD],  <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31405 close(21 <unfinished ...>
>31404 <... rt_sigprocmask resumed> [], 8) = 0
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
>31405 close(22)                         = -1 EBADF (Bad file descriptor)
>31404 <... rt_sigprocmask resumed> NULL, 8) = 0
>31405 close(23 <unfinished ...>
>31404 read(3,  <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 <... read resumed> "\31\207)\331\303d\320\"\367c+l8\223\355\243\250\243\10\317p\332{\306\374t\226PP\17D\277\372\235\35\37\325\333\224\316\313\357)sJa9\351", 16384) = 48
>31405 close(24 <unfinished ...>
>31404 select(10, [3 5 9], [8], NULL, NULL <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 <... select resumed> )            = 1 (out [8])
>31405 close(25 <unfinished ...>
>31404 rt_sigprocmask(SIG_BLOCK, [CHLD],  <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31405 close(26 <unfinished ...>
>31404 <... rt_sigprocmask resumed> [], 8) = 0
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 rt_sigprocmask(SIG_SETMASK, [],  <unfinished ...>
>31405 close(27)                         = -1 EBADF (Bad file descriptor)
>31404 <... rt_sigprocmask resumed> NULL, 8) = 0
>31405 close(28 <unfinished ...>
>31404 write(8, "\0\0\0\5\1\0\0\0\3", 9 <unfinished ...>
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31405 close(29 <unfinished ...>
>31404 <... write resumed> )             = 9
>31405 <... close resumed> )             = -1 EBADF (Bad file descriptor)
>31404 select(10, [3 5 9], [], NULL, NULL <unfinished ...>
>31405 close(30)                         = -1 EBADF (Bad file descriptor)
>31405 close(31)                         = -1 EBADF (Bad file descriptor)
>31405 close(32)                         = -1 EBADF (Bad file descriptor)
>31405 close(33)                         = -1 EBADF (Bad file descriptor)
>31405 close(34)                         = -1 EBADF (Bad file descriptor)
>31405 close(35)                         = -1 EBADF (Bad file descriptor)
>31405 close(36)                         = -1 EBADF (Bad file descriptor)
>31405 close(37)                         = -1 EBADF (Bad file descriptor)
>31405 close(38)                         = -1 EBADF (Bad file descriptor)
>31405 close(39)                         = -1 EBADF (Bad file descriptor)
>31405 close(40)                         = -1 EBADF (Bad file descriptor)
>31405 close(41)                         = -1 EBADF (Bad file descriptor)
>31405 close(42)                         = -1 EBADF (Bad file descriptor)
>31405 close(43)                         = -1 EBADF (Bad file descriptor)
>31405 close(44)                         = -1 EBADF (Bad file descriptor)
>31405 close(45)                         = -1 EBADF (Bad file descriptor)
>31405 close(46)                         = -1 EBADF (Bad file descriptor)
>31405 close(47)                         = -1 EBADF (Bad file descriptor)
>31405 close(48)                         = -1 EBADF (Bad file descriptor)
>31405 close(49)                         = -1 EBADF (Bad file descriptor)
>31405 close(50)                         = -1 EBADF (Bad file descriptor)
>31405 close(51)                         = -1 EBADF (Bad file descriptor)
>31405 close(52)                         = -1 EBADF (Bad file descriptor)
>31405 close(53)                         = -1 EBADF (Bad file descriptor)
>31405 close(54)                         = -1 EBADF (Bad file descriptor)
>31405 close(55)                         = -1 EBADF (Bad file descriptor)
>31405 close(56)                         = -1 EBADF (Bad file descriptor)
>31405 close(57)                         = -1 EBADF (Bad file descriptor)
>31405 close(58)                         = -1 EBADF (Bad file descriptor)
>31405 close(59)                         = -1 EBADF (Bad file descriptor)
>31405 close(60)                         = -1 EBADF (Bad file descriptor)
>31405 close(61)                         = -1 EBADF (Bad file descriptor)
>31405 close(62)                         = -1 EBADF (Bad file descriptor)
>31405 close(63)                         = -1 EBADF (Bad file descriptor)
>31405 chdir("/home/testik")             = 0
>31405 open("/proc/31405/fd", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 3
>31405 getdents64(3, /* 6 entries */, 32768) = 144
>31405 getdents64(3, /* 0 entries */, 32768) = 0
>31405 close(3)                          = 0
>31405 stat64("/etc/ssh/sshrc", 0xbfafdef8) = -1 ENOENT (No such file or directory)
>31405 rt_sigaction(SIGPIPE, NULL, {SIG_IGN, [], 0}, 8) = 0
>31405 rt_sigaction(SIGPIPE, {SIG_DFL, [], 0}, NULL, 8) = 0
>31405 execve("/usr/local/sbin/scponlyc", ["scponlyc", "-c", "/usr/lib/misc/sftp-server"], [/* 8 vars */]) = 0
>31405 brk(0)                            = 0x8050000
>31405 fcntl64(0, F_GETFD)               = 0
>31405 fcntl64(1, F_GETFD)               = 0
>31405 fcntl64(2, F_GETFD)               = 0
>31405 access("/etc/suid-debug", F_OK)   = -1 ENOENT (No such file or directory)
>31405 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
>31405 open("/etc/ld.so.cache", O_RDONLY) = 3
>31405 fstat64(3, {st_mode=S_IFREG|0644, st_size=105476, ...}) = 0
>31405 mmap2(NULL, 105476, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7f1f000
>31405 close(3)                          = 0
>31405 open("/lib/libc.so.6", O_RDONLY)  = 3
>31405 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260k\1\0004\0\0\0\244\26\24\0\0\0\0\0004\0 \0\v\0(\0C\0B\0\6\0\0\0004\0\0\0004\0\0\0004\0\0\0`\1\0\0`\1\0\0\5\0\0\0\4\0\0\0\3\0\0\0\300\213\22\0\300\213\22\0\300\213\22\0\23\0\0\0\23\0\0\0\4\0\0\0\1\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0"..., 512) = 512
>31405 fstat64(3, {st_mode=S_IFREG|0755, st_size=1319196, ...}) = 0
>31405 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f1e000
>31405 mmap2(NULL, 1325352, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb7dda000
>31405 mmap2(0xb7f18000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13e) = 0xb7f18000
>31405 mmap2(0xb7f1b000, 10536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7f1b000
>31405 close(3)                          = 0
>31405 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7dd9000
>31405 set_thread_area({entry_number:-1 -> 6, base_addr:0xb7dd96c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
>31405 mprotect(0xb7f18000, 8192, PROT_READ) = 0
>31405 mprotect(0x804c000, 4096, PROT_READ) = 0
>31405 mprotect(0xb7f55000, 4096, PROT_READ) = 0
>31405 munmap(0xb7f1f000, 105476)        = 0
>31405 brk(0)                            = 0x8050000
>31405 brk(0x8071000)                    = 0x8071000
>31405 open("/etc/scponly/debuglevel", O_RDONLY) = 3
>31405 fstat64(3, {st_mode=S_IFREG|0644, st_size=2, ...}) = 0
>31405 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f38000
>31405 read(3, "2\n", 4096)              = 2
>31405 close(3)                          = 0
>31405 munmap(0xb7f38000, 4096)          = 0
>31405 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 3
>31405 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31405 time(NULL)                        = 1271075524
>31405 open("/etc/localtime", O_RDONLY)  = 4
>31405 fstat64(4, {st_mode=S_IFREG|0644, st_size=755, ...}) = 0
>31405 fstat64(4, {st_mode=S_IFREG|0644, st_size=755, ...}) = 0
>31405 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f38000
>31405 read(4, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\0\0\0\0\206\0\0\0\4\0\0\0\t\233\f\27`\233\325\332\360\234\331\256\220\235\244\265\220\236\271\220\220\237\204\227\220\310\tq\220\314\347K\20\315\251\27\220\316\242C\20\317\2224\20\320\202%\20\r\244c\220\16\213\32\20\17\204E\220\20t6\220\21d'\220\22T\30\220\23MD\20\0243\372\220\25#\353\220"..., 4096) = 755
>31405 close(4)                          = 0
>31405 munmap(0xb7f38000, 4096)          = 0
>31405 getpid()                          = 31405
>31405 writev(2, [{"scponly[31405]: chrooted binary in place, will chroot()", 55}, {"\n", 1}], 2) = -1 EPIPE (Broken pipe)
>31405 --- SIGPIPE (Broken pipe) @ 0 (0) ---
>31404 <... select resumed> )            = 1 (in [9])
>31404 --- SIGCHLD (Child exited) @ 0 (0) ---
>31404 rt_sigaction(SIGCHLD, NULL, {0x8058610, [], 0}, 8) = 0
>31404 write(6, "\0", 1)                 = 1
>31404 sigreturn()                       = ? (mask now [])
>31404 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: Received SIGCHLD.", 58, MSG_NOSIGNAL) = 58
>31404 close(7)                          = 0
>31404 waitpid(-1, [{WIFSIGNALED(s) && WTERMSIG(s) == SIGPIPE}], WNOHANG) = 31405
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: session_by_pid: pid 31405", 66, MSG_NOSIGNAL) = 66
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: session_exit_message: session 0 channel 0 pid 31405", 92, MSG_NOSIGNAL) = 92
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: request exit-signal confirm 0", 81, MSG_NOSIGNAL) = 81
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: session_exit_message: release channel 0", 80, MSG_NOSIGNAL) = 80
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: write failed", 64, MSG_NOSIGNAL) = 64
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: close_write", 63, MSG_NOSIGNAL) = 63
>31404 close(7)                          = 0
>31404 close(8)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: send eow", 60, MSG_NOSIGNAL) = 60
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: output open -> closed", 73, MSG_NOSIGNAL) = 73
>31404 close(7)                          = 0
>31404 waitpid(-1, 0xbfafe42c, WNOHANG)  = -1 ECHILD (No child processes)
>31404 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
>31404 read(9, "", 16384)                = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: read<=0 rfd 9 len 0", 71, MSG_NOSIGNAL) = 71
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: read failed", 63, MSG_NOSIGNAL) = 63
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: close_read", 62, MSG_NOSIGNAL) = 62
>31404 close(7)                          = 0
>31404 close(9)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: input open -> drain", 71, MSG_NOSIGNAL) = 71
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: ibuf empty", 62, MSG_NOSIGNAL) = 62
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: send eof", 60, MSG_NOSIGNAL) = 60
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: input drain -> closed", 73, MSG_NOSIGNAL) = 73
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: send close", 62, MSG_NOSIGNAL) = 62
>31404 close(7)                          = 0
>31404 select(10, [3 5], [3], NULL, NULL) = 2 (in [5], out [3])
>31404 read(5, "\0", 1)                  = 1
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: notify_done: reading", 61, MSG_NOSIGNAL) = 61
>31404 close(7)                          = 0
>31404 read(5, 0xbfafe527, 1)            = -1 EAGAIN (Resource temporarily unavailable)
>31404 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
>31404 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
>31404 write(3, "\273\235\246\277~v\34\300\216\3208X\204\357d\r\24\214\352\270\204\242\357~\310[q\320'\351B\321\2770\253\207\265\332\r\234\232r@ItRu5\321\366\370\253\306j\333Q\301\22\37s\326\5\310!%\33oI|\317O@\305\223-\361\30776\327\210\341\362]\227\207G\216m\322s\35$\343\255\317\222\31(\251\256\341\307;>!\32\1\231\357\320\272Z\343w\v&\226\337r(\10\177\224?\202\312%"..., 192) = 192
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug3: channel 0: will not send data after close", 82, MSG_NOSIGNAL) = 82
>31404 close(7)                          = 0
>31404 select(10, [3 5], [], NULL, NULL) = 1 (in [3])
>31404 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
>31404 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
>31404 read(3, "U/o\23\242\323\313\32&\331\220bu*i\204\nP\234\v\240Xp\240T\301t\300{N+\342|MWJb\10\21\10\232p\323\350\241\326\32\366\354a\2%\\\370\356!\2/\332\"\366\177\30\372\"\313oQ\355\343\256b\202\20\247\3\245=a2ea\26\36\256\23\337\370C\272\307\366\354!\255H", 16384) = 96
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug2: channel 0: rcvd close", 62, MSG_NOSIGNAL) = 62
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<38>Apr 12 14:32:04 sshd[31404]: Received disconnect from 192.168.0.108: 11: disconnected by user", 97, MSG_NOSIGNAL) = 97
>31404 close(7)                          = 0
>31404 time(NULL)                        = 1271075524
>31404 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 7
>31404 connect(7, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31404 send(7, "<39>Apr 12 14:32:04 sshd[31404]: debug1: do_cleanup", 51, MSG_NOSIGNAL) = 51
>31404 close(7)                          = 0
>31404 exit_group(255)                   = ?
>31402 <... read resumed> 0xbfafe528, 4) = ? ERESTARTSYS (To be restarted)
>31402 --- SIGCHLD (Child exited) @ 0 (0) ---
>31402 read(5, "", 4)                    = 0
>31402 time(NULL)                        = 1271075524
>31402 socket(PF_FILE, SOCK_DGRAM|0x80000 /* SOCK_??? */, 0) = 4
>31402 connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
>31402 send(4, "<39>Apr 12 14:32:04 sshd[31402]: debug1: do_cleanup", 51, MSG_NOSIGNAL) = 51
>31402 close(4)                          = 0
>31402 exit_group(255)                   = ?
>31338 <... select resumed> )            = ? ERESTARTNOHAND (To be restarted)
>31338 --- SIGCHLD (Child exited) @ 0 (0) ---
>31338 waitpid(-1, [{WIFEXITED(s) && WEXITSTATUS(s) == 255}], WNOHANG) = 31402
>31338 waitpid(-1, 0xbf874028, WNOHANG)  = -1 ECHILD (No child processes)
>31338 rt_sigaction(SIGCHLD, NULL, {0x804e130, [], 0}, 8) = 0
>31338 sigreturn()                       = ? (mask now [])
>31338 select(7, [3 4], NULL, NULL, NULL <unfinished ...>

Actions: View

Attachments on bug 1755: 1838