15104 restart_syscall(<... resuming interrupted call ...> 15106 futex(0x98e152c, FUTEX_WAIT, 0, NULL 15108 pselect6(7, [6], NULL, NULL, NULL 15109 pselect6(12, [11], NULL, NULL, NULL 15095 select(10, [7 9], NULL, NULL, {0, 688000} 15105 futex(0x98de02c, FUTEX_WAIT, 0, NULL 15107 futex(0x9885b00, FUTEX_WAIT, 0, NULL 15095 <... select resumed> ) = 0 (Timeout) 15095 gettimeofday({1389351331, 784128}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351331, 784532}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351331, 784842}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 0 (Timeout) 15095 gettimeofday({1389351336, 784668}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351336, 784932}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351336, 785151}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 0 (Timeout) 15095 gettimeofday({1389351341, 785068}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351341, 785394}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351341, 785619}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0} 15108 <... pselect6 resumed> , [HUP INT USR1 USR2 PIPE ALRM TERM CHLD TSTP TTIN TTOU VTALRM WINCH IO], 8) = 1 (in [6]) 15108 futex(0x98e152c, FUTEX_WAKE, 1) = 1 15106 <... futex resumed> ) = 0 15108 futex(0x98e1bb8, FUTEX_WAIT, 0, NULL 15106 gettimeofday({1389351342, 155191}, NULL) = 0 15106 recv(6, "\27\3\3\0\35\31\214\314:_\23\364\336\320\210p\357\34q\364"..., 131072, 0) = 34 15106 send(11, "xxxxxxx\n", 9, 0) = 9 15106 futex(0x98e1bb8, FUTEX_WAKE, 1) = 1 15108 <... futex resumed> ) = 0 15106 gettimeofday( 15108 pselect6(7, [6], NULL, NULL, NULL 15106 <... gettimeofday resumed> {1389351342, 155552}, NULL) = 0 15106 futex(0x98e152c, FUTEX_WAIT, 0, NULL 15095 <... select resumed> ) = 1 (in [7], left {4, 632000}) 15095 gettimeofday({1389351342, 155721}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(7, "c", 1, 0) = 1 15095 gettimeofday({1389351342, 156171}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 156409}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 1 (in [7], left {5, 0}) 15095 gettimeofday({1389351342, 156692}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(7, "c", 1, 0) = 1 15095 gettimeofday({1389351342, 157117}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 157344}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 1 (in [7], left {5, 0}) 15095 gettimeofday({1389351342, 157621}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(7, "b", 1, 0) = 1 15095 gettimeofday({1389351342, 157958}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 158180}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 1 (in [7], left {5, 0}) 15095 gettimeofday({1389351342, 158501}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(7, "o", 1, 0) = 1 15095 gettimeofday({1389351342, 158843}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 159066}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 1 (in [7], left {5, 0}) 15095 gettimeofday({1389351342, 159342}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(7, "x", 1, 0) = 1 15095 gettimeofday({1389351342, 159688}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 159911}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 1 (in [7], left {5, 0}) 15095 gettimeofday({1389351342, 160188}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(7, "c", 1, 0) = 1 15095 gettimeofday({1389351342, 160544}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 160768}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 1 (in [7], left {5, 0}) 15095 gettimeofday({1389351342, 161121}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(7, "g", 1, 0) = 1 15095 gettimeofday({1389351342, 161459}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 161684}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 1 (in [7], left {5, 0}) 15095 gettimeofday({1389351342, 161957}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(7, "s", 1, 0) = 1 15095 gettimeofday({1389351342, 162291}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 162511}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [7 9], NULL, NULL, {5, 0}) = 1 (in [7], left {5, 0}) 15095 gettimeofday({1389351342, 162783}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(7, "\n", 1, 0) = 1 15095 send(7, "********\n", 9, 0) = 9 15109 <... pselect6 resumed> , [HUP INT USR1 USR2 PIPE ALRM TERM CHLD TSTP TTIN TTOU VTALRM WINCH IO], 8) = 1 (in [11]) 15095 open("/etc/passwd", O_RDONLY 15109 futex(0x98e152c, FUTEX_WAKE, 1 15095 <... open resumed> ) = 12 15106 <... futex resumed> ) = 0 15109 <... futex resumed> ) = 1 15095 fcntl64(12, F_GETFD 15106 gettimeofday( 15109 futex(0x98ede80, FUTEX_WAIT, 0, NULL 15095 <... fcntl64 resumed> ) = 0 15106 <... gettimeofday resumed> {1389351342, 163780}, NULL) = 0 15095 fcntl64(12, F_SETFD, FD_CLOEXEC 15106 recv(11, 15095 <... fcntl64 resumed> ) = 0 15106 <... recv resumed> "********\n", 131072, 0) = 9 15095 fstat64(12, {st_mode=S_IFREG|0644, st_size=1110, ...}) = 0 15106 send(6, "\27\3\3\0\35)\253y\220w\20\34\340\316\264\247\30\315\351"..., 34, 0 15095 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb763d000 15106 <... send resumed> ) = 34 15095 read(12, 15106 futex(0x98ede80, FUTEX_WAKE, 1 15095 <... read resumed> "at:x:25:25:Batch jobs daemon:/va"..., 4096) = 1110 15109 <... futex resumed> ) = 0 15106 <... futex resumed> ) = 1 15095 close(12 15109 pselect6(12, [11], NULL, NULL, NULL 15106 gettimeofday( 15095 <... close resumed> ) = 0 15106 <... gettimeofday resumed> {1389351342, 164583}, NULL) = 0 15095 munmap(0xb763d000, 4096 15106 futex(0x98e152c, FUTEX_WAIT, 0, NULL 15095 <... munmap resumed> ) = 0 15095 open("/etc/shadow", O_RDONLY) = -1 EACCES (Permission denied) 15095 open("/var/yp/binding/mcs.2", O_RDONLY) = -1 ENOENT (No such file or directory) 15095 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 12 15095 bind(12, {sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 15095 connect(12, {sa_family=AF_INET, sin_port=htons(111), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 15095 write(12, "\200\0\0008l\205g\226\0\0\0\0\0\0\0\2\0\1\206\240\0\0\0"..., 60) = 60 15095 poll([{fd=12, events=POLLIN, revents=POLLIN}], 1, 60000) = 1 15095 read(12, "\200\0\0\34l\205g\226\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 400) = 32 15095 close(12) = 0 15095 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 12 15095 bind(12, {sa_family=AF_INET, sin_port=htons(0), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 15095 connect(12, {sa_family=AF_INET, sin_port=htons(111), sin_addr=inet_addr("127.0.0.1")}, 16) = 0 15095 write(12, "\200\0\0008,G\301\n\0\0\0\0\0\0\0\2\0\1\206\240\0\0\0\2"..., 60) = 60 15095 poll([{fd=12, events=POLLIN, revents=POLLIN}], 1, 60000) = 1 15095 read(12, "\200\0\0\34,G\301\n\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 400) = 32 15095 close(12) = 0 15095 pipe([12, 13]) = 0 15095 fcntl64(12, 0x407 /* F_??? */, 0x10000) = -1 EINVAL (Invalid argument) 15095 fcntl64(13, 0x407 /* F_??? */, 0x10000) = -1 EINVAL (Invalid argument) 15095 fstat64(12, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 15095 fstat64(13, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 15095 fcntl64(12, F_SETFD, 0) = 0 15095 fcntl64(13, F_SETFD, FD_CLOEXEC) = 0 15095 pipe([14, 15]) = 0 15095 fcntl64(14, 0x407 /* F_??? */, 0x10000) = -1 EINVAL (Invalid argument) 15095 fcntl64(15, 0x407 /* F_??? */, 0x10000) = -1 EINVAL (Invalid argument) 15095 fstat64(14, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 15095 fstat64(15, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 15095 fcntl64(14, F_SETFD, FD_CLOEXEC) = 0 15095 fcntl64(15, F_SETFD, 0) = 0 15095 open("/usr/NX/var/log/nxerror.log", O_WRONLY|O_APPEND|O_CREAT, 0600) = 16 15095 ioctl(16, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbf86d088) = -1 ENOTTY (Inappropriate ioctl for device) 15095 fstat64(16, {st_mode=S_IFREG|0666, st_size=8719, ...}) = 0 15095 fcntl64(16, F_SETFD, 0) = 0 15095 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb74b16f8) = 15297 15095 waitpid(15297, 15297 setitimer(ITIMER_REAL, {it_interval={0, 0}, it_value={0, 0}}, 15095 <... waitpid resumed> 0xbf86d15c, WNOHANG|WSTOPPED) = 0 15297 <... setitimer resumed> NULL) = 0 15095 close(12 15297 rt_sigaction(SIGHUP, {SIG_DFL}, 15095 <... close resumed> ) = 0 15297 <... rt_sigaction resumed> NULL, 8) = 0 15095 close(15 15297 rt_sigaction(SIGINT, {SIG_DFL}, 15095 <... close resumed> ) = 0 15297 <... rt_sigaction resumed> NULL, 8) = 0 15095 close(16 15297 rt_sigaction(SIGQUIT, {SIG_DFL}, 15095 <... close resumed> ) = 0 15297 <... rt_sigaction resumed> NULL, 8) = 0 15095 gettimeofday( 15297 rt_sigaction(SIGUSR1, {SIG_DFL}, 15095 <... gettimeofday resumed> {1389351342, 172499}, NULL) = 0 15297 <... rt_sigaction resumed> NULL, 8) = 0 15095 stat64("/etc/localtime", 15297 rt_sigaction(SIGUSR2, {SIG_DFL}, 15095 <... stat64 resumed> {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 <... rt_sigaction resumed> NULL, 8) = 0 15095 gettimeofday( 15297 rt_sigaction(SIGPIPE, {SIG_DFL}, 15095 <... gettimeofday resumed> {1389351342, 173023}, NULL) = 0 15297 <... rt_sigaction resumed> NULL, 8) = 0 15095 stat64("/etc/localtime", 15297 rt_sigaction(SIGALRM, {SIG_DFL}, 15095 <... stat64 resumed> {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 <... rt_sigaction resumed> NULL, 8) = 0 15095 gettimeofday( 15297 rt_sigaction(SIGTERM, {SIG_DFL}, 15095 <... gettimeofday resumed> {1389351342, 173589}, NULL) = 0 15297 <... rt_sigaction resumed> NULL, 8) = 0 15095 stat64("/etc/localtime", 15297 rt_sigaction(SIGCHLD, {SIG_DFL}, 15095 <... stat64 resumed> {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 <... rt_sigaction resumed> NULL, 8) = 0 15095 select(15, [9 14], NULL, NULL, {5, 0} 15297 rt_sigaction(SIGTSTP, {SIG_DFL}, NULL, 8) = 0 15297 rt_sigaction(SIGTTIN, {SIG_DFL}, NULL, 8) = 0 15297 rt_sigaction(SIGTTOU, {SIG_DFL}, NULL, 8) = 0 15297 rt_sigaction(SIGVTALRM, {SIG_DFL}, NULL, 8) = 0 15297 rt_sigaction(SIGWINCH, {SIG_DFL}, NULL, 8) = 0 15297 rt_sigaction(SIGIO, {SIG_DFL}, NULL, 8) = 0 15297 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 15297 getppid() = 15095 15297 gettid() = 15297 15297 getgid32() = 1001 15297 setgid32(1001) = 0 15297 getuid32() = 103 15297 setuid32(103) = 0 15297 dup2(12, 0) = 0 15297 fstat64(0, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 15297 close(12) = 0 15297 dup2(15, 1) = 1 15297 fstat64(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 15297 close(15) = 0 15297 dup2(16, 2) = 2 15297 fstat64(2, {st_mode=S_IFREG|0666, st_size=8719, ...}) = 0 15297 close(16) = 0 15297 setpriority(PRIO_PROCESS, 0, 0) = 0 15297 execve("/usr/NX/bin/nxexec", ["/usr/NX/bin/nxexec", "--auth"], [/* 9 vars */]) = 0 15297 brk(0) = 0x8052000 15297 fcntl64(0, F_GETFD) = 0 15297 fcntl64(1, F_GETFD) = 0 15297 fcntl64(2, F_GETFD) = 0 15297 access("/etc/suid-debug", F_OK) = -1 ENOENT (No such file or directory) 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77cb000 15297 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) 15297 open("/etc/ld.so.cache", O_RDONLY) = 6 15297 fstat64(6, {st_mode=S_IFREG|0644, st_size=76730, ...}) = 0 15297 mmap2(NULL, 76730, PROT_READ, MAP_PRIVATE, 6, 0) = 0xb77b8000 15297 close(6) = 0 15297 open("/lib/libcrypt.so.1", O_RDONLY) = 6 15297 read(6, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\t\0\000"..., 512) = 512 15297 fstat64(6, {st_mode=S_IFREG|0755, st_size=47547, ...}) = 0 15297 mmap2(NULL, 205372, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0xb7785000 15297 madvise(0xb7785000, 205372, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb778e000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x8) = 0xb778e000 15297 mmap2(0xb7791000, 156220, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb7791000 15297 close(6) = 0 15297 open("/lib/libdl.so.2", O_RDONLY) = 6 15297 read(6, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\f\0\000"..., 512) = 512 15297 fstat64(6, {st_mode=S_IFREG|0755, st_size=14166, ...}) = 0 15297 mmap2(NULL, 12412, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0xb7781000 15297 madvise(0xb7781000, 12412, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb7783000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x1) = 0xb7783000 15297 close(6) = 0 15297 open("/lib/libc.so.6", O_RDONLY) = 6 15297 read(6, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340Y\1"..., 512) = 512 15297 fstat64(6, {st_mode=S_IFREG|0755, st_size=1481495, ...}) = 0 15297 mmap2(NULL, 1230268, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0xb7654000 15297 madvise(0xb7654000, 1230268, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb777a000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x125) = 0xb777a000 15297 mmap2(0xb777e000, 9660, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb777e000 15297 close(6) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7653000 15297 set_thread_area({entry_number:-1 -> 6, base_addr:0xb76538c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 15297 mprotect(0xb777a000, 8192, PROT_READ) = 0 15297 munmap(0xb77b8000, 76730) = 0 15297 brk(0) = 0x8052000 15297 brk(0x8073000) = 0x8073000 15297 getuid32() = 103 15297 socket(PF_FILE, SOCK_STREAM, 0) = 6 15297 fcntl64(6, F_GETFL) = 0x2 (flags O_RDWR) 15297 fcntl64(6, F_SETFL, O_RDWR|O_NONBLOCK) = 0 15297 connect(6, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 15297 close(6) = 0 15297 socket(PF_FILE, SOCK_STREAM, 0) = 6 15297 fcntl64(6, F_GETFL) = 0x2 (flags O_RDWR) 15297 fcntl64(6, F_SETFL, O_RDWR|O_NONBLOCK) = 0 15297 connect(6, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 15297 close(6) = 0 15297 open("/etc/nsswitch.conf", O_RDONLY) = 6 15297 fstat64(6, {st_mode=S_IFREG|0644, st_size=1209, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77ca000 15297 read(6, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1209 15297 read(6, "", 4096) = 0 15297 close(6) = 0 15297 munmap(0xb77ca000, 4096) = 0 15297 open("/etc/ld.so.cache", O_RDONLY) = 6 15297 fstat64(6, {st_mode=S_IFREG|0644, st_size=76730, ...}) = 0 15297 mmap2(NULL, 76730, PROT_READ, MAP_PRIVATE, 6, 0) = 0xb77b8000 15297 close(6) = 0 15297 open("/lib/libnss_files.so.2", O_RDONLY) = 6 15297 read(6, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\360\33"..., 512) = 512 15297 fstat64(6, {st_mode=S_IFREG|0755, st_size=42485, ...}) = 0 15297 mmap2(NULL, 37528, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0xb7649000 15297 madvise(0xb7649000, 37528, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb7651000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x7) = 0xb7651000 15297 close(6) = 0 15297 munmap(0xb77b8000, 76730) = 0 15297 open("/etc/passwd", O_RDONLY) = 6 15297 fcntl64(6, F_GETFD) = 0 15297 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 15297 fstat64(6, {st_mode=S_IFREG|0644, st_size=1110, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77ca000 15297 read(6, "at:x:25:25:Batch jobs daemon:/va"..., 4096) = 1110 15297 close(6) = 0 15297 munmap(0xb77ca000, 4096) = 0 15297 getpid() = 15297 15297 open("/proc/15297/cmdline", O_RDONLY) = 6 15297 read(6, "/usr/NX/bin/nxexec\0--auth\0", 256) = 26 15297 close(6) = 0 15297 lstat64("/etc/NX/server/localhost/client.cfg", {st_mode=S_IFREG|0644, st_size=607, ...}) = 0 15297 open("/etc/NX/server/localhost/client.cfg", O_RDONLY) = 6 15297 fstat64(6, {st_mode=S_IFREG|0644, st_size=607, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77ca000 15297 read(6, "################################"..., 4096) = 607 15297 read(6, "", 4096) = 0 15297 close(6) = 0 15297 munmap(0xb77ca000, 4096) = 0 15297 lstat64("/usr/NX/scripts/restricted", {st_mode=S_IFDIR|0755, st_size=864, ...}) = 0 15297 fstat64(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77ca000 15297 write(1, "Username:", 9 15095 <... select resumed> ) = 1 (in [14], left {4, 992000}) 15297 <... write resumed> ) = 9 15095 gettimeofday({1389351342, 181698}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 read(14, "Username:", 4096) = 9 15095 write(13, "cgsadmin\n", 9) = 9 15095 gettimeofday({1389351342, 182333}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 182528}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 182742}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(15, [9 14], NULL, NULL, {5, 0} 15297 fstat64(0, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77c9000 15297 read(0, "cgsadmin\n", 4096) = 9 15297 write(1, "Password:", 9 15095 <... select resumed> ) = 1 (in [14], left {5, 0}) 15297 <... write resumed> ) = 9 15095 gettimeofday({1389351342, 183224}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 read(14, "Password:", 4096) = 9 15095 write(13, "xxxxxx\n", 9) = 9 15095 gettimeofday({1389351342, 183640}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 183831}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 184041}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(15, [9 14], NULL, NULL, {5, 0} 15297 read(0, "xxxxxx\n", 4096) = 9 15297 open("/etc/ld.so.cache", O_RDONLY) = 6 15297 fstat64(6, {st_mode=S_IFREG|0644, st_size=76730, ...}) = 0 15297 mmap2(NULL, 76730, PROT_READ, MAP_PRIVATE, 6, 0) = 0xb7636000 15297 close(6) = 0 15297 open("/lib/libpam.so.0", O_RDONLY) = 6 15297 read(6, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\32"..., 512) = 512 15297 fstat64(6, {st_mode=S_IFREG|0755, st_size=40700, ...}) = 0 15297 mmap2(NULL, 42272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0xb77be000 15297 madvise(0xb77be000, 42272, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb77c8000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x9) = 0xb77c8000 15297 close(6) = 0 15297 open("/lib/libaudit.so.0", O_RDONLY) = 6 15297 read(6, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`\33\0\000"..., 512) = 512 15297 fstat64(6, {st_mode=S_IFREG|0755, st_size=71528, ...}) = 0 15297 mmap2(NULL, 74016, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0xb7623000 15297 madvise(0xb7623000, 74016, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb7634000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x10) = 0xb7634000 15297 close(6) = 0 15297 munmap(0xb7636000, 76730) = 0 15297 stat64("/etc/pam.d", {st_mode=S_IFDIR|0755, st_size=1008, ...}) = 0 15297 open("/etc/pam.d/su", O_RDONLY|O_LARGEFILE) = 6 15297 fstat64(6, {st_mode=S_IFREG|0644, st_size=239, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77bd000 15297 read(6, "#%PAM-1.0\nauth sufficient "..., 4096) = 239 15297 open("/lib/security/pam_rootok.so", O_RDONLY) = 7 15297 read(7, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000\4\0"..., 512) = 512 15297 fstat64(7, {st_mode=S_IFREG|0755, st_size=3372, ...}) = 0 15297 mmap2(NULL, 6056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0xb77bb000 15297 madvise(0xb77bb000, 6056, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb77bc000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0) = 0xb77bc000 15297 close(7) = 0 15297 open("/etc/pam.d/common-auth", O_RDONLY|O_LARGEFILE) = 7 15297 fstat64(7, {st_mode=S_IFREG|0644, st_size=448, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77ba000 15297 read(7, "#\n# /etc/pam.d/common-auth - aut"..., 4096) = 448 15297 open("/lib/security/pam_env.so", O_RDONLY) = 8 15297 read(8, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\10"..., 512) = 512 15297 fstat64(8, {st_mode=S_IFREG|0755, st_size=10096, ...}) = 0 15297 mmap2(NULL, 12780, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0xb7645000 15297 madvise(0xb7645000, 12780, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb7648000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x2) = 0xb7648000 15297 close(8) = 0 15297 open("/lib/security/pam_unix2.so", O_RDONLY) = 8 15297 read(8, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340#\0"..., 512) = 512 15297 fstat64(8, {st_mode=S_IFREG|0755, st_size=52768, ...}) = 0 15297 mmap2(NULL, 54700, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0xb7637000 15297 madvise(0xb7637000, 54700, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb7644000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0xc) = 0xb7644000 15297 close(8) = 0 15297 open("/etc/ld.so.cache", O_RDONLY) = 8 15297 fstat64(8, {st_mode=S_IFREG|0644, st_size=76730, ...}) = 0 15297 mmap2(NULL, 76730, PROT_READ, MAP_PRIVATE, 8, 0) = 0xb7610000 15297 close(8) = 0 15297 open("/lib/libnsl.so.1", O_RDONLY) = 8 15297 read(8, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0`5\0\000"..., 512) = 512 15297 fstat64(8, {st_mode=S_IFREG|0755, st_size=88794, ...}) = 0 15297 mmap2(NULL, 83712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0xb75fb000 15297 madvise(0xb75fb000, 83712, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb760c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0x10) = 0xb760c000 15297 mmap2(0xb760e000, 5888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb760e000 15297 close(8) = 0 15297 open("/lib/libxcrypt.so.1", O_RDONLY) = 8 15297 read(8, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\r\0"..., 512) = 512 15297 fstat64(8, {st_mode=S_IFREG|0755, st_size=53488, ...}) = 0 15297 mmap2(NULL, 216060, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 8, 0) = 0xb75c6000 15297 madvise(0xb75c6000, 216060, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb75d2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 8, 0xb) = 0xb75d2000 15297 mmap2(0xb75d4000, 158716, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb75d4000 15297 close(8) = 0 15297 munmap(0xb7610000, 76730) = 0 15297 munmap(0xb7637000, 54700) = 0 15297 munmap(0xb75fb000, 83712) = 0 15297 munmap(0xb75c6000, 216060) = 0 15297 time(NULL) = 1389351342 15297 open("/etc/localtime", O_RDONLY) = 8 15297 fstat64(8, {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 fstat64(8, {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77b9000 15297 read(8, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\1\0\0\0\1\0"..., 4096) = 56 15297 close(8) = 0 15297 munmap(0xb77b9000, 4096) = 0 15297 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 socket(PF_FILE, SOCK_DGRAM, 0) = 8 15297 fcntl64(8, F_SETFD, FD_CLOEXEC) = 0 15297 connect(8, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0 15297 send(8, "<83>Jan 10 10:55:42 nxexec: PAM "..., 76, MSG_NOSIGNAL) = 76 15297 time(NULL) = 1389351342 15297 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 send(8, "<83>Jan 10 10:55:42 nxexec: PAM "..., 97, MSG_NOSIGNAL) = 97 15297 time(NULL) = 1389351342 15297 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15297 send(8, "<83>Jan 10 10:55:42 nxexec: PAM "..., 80, MSG_NOSIGNAL) = 80 15297 read(7, "", 4096) = 0 15297 close(7) = 0 15297 munmap(0xb77ba000, 4096) = 0 15297 open("/etc/pam.d/common-account", O_RDONLY|O_LARGEFILE) = 7 15297 fstat64(7, {st_mode=S_IFREG|0644, st_size=378, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77ba000 15297 read(7, "#\n# /etc/pam.d/common-account - "..., 4096) = 378 15297 read(7, "", 4096) = 0 15297 close(7) = 0 15297 munmap(0xb77ba000, 4096) = 0 15297 open("/etc/pam.d/common-password", O_RDONLY|O_LARGEFILE) = 7 15297 fstat64(7, {st_mode=S_IFREG|0644, st_size=846, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77ba000 15297 read(7, "#\n# /etc/pam.d/common-password -"..., 4096) = 846 15297 open("/lib/security/pam_pwcheck.so", O_RDONLY) = 9 15297 read(9, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\24\0\000"..., 512) = 512 15297 fstat64(9, {st_mode=S_IFREG|0755, st_size=29820, ...}) = 0 15297 mmap2(NULL, 32204, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 9, 0) = 0xb763d000 15297 madvise(0xb763d000, 32204, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb7644000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 9, 0x6) = 0xb7644000 15297 close(9) = 0 15297 open("/etc/ld.so.cache", O_RDONLY) = 9 15297 fstat64(9, {st_mode=S_IFREG|0644, st_size=76730, ...}) = 0 15297 mmap2(NULL, 76730, PROT_READ, MAP_PRIVATE, 9, 0) = 0xb7610000 15297 close(9) = 0 15297 open("/usr/lib/libcrack.so.2", O_RDONLY) = 9 15297 read(9, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260\34"..., 512) = 512 15297 fstat64(9, {st_mode=S_IFREG|0755, st_size=27372, ...}) = 0 15297 mmap2(NULL, 44864, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 9, 0) = 0xb7605000 15297 madvise(0xb7605000, 44864, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb760b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 9, 0x5) = 0xb760b000 15297 mmap2(0xb760d000, 12096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb760d000 15297 close(9) = 0 15297 open("/lib/libxcrypt.so.1", O_RDONLY) = 9 15297 read(9, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\r\0"..., 512) = 512 15297 fstat64(9, {st_mode=S_IFREG|0755, st_size=53488, ...}) = 0 15297 mmap2(NULL, 216060, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 9, 0) = 0xb75d0000 15297 madvise(0xb75d0000, 216060, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb75dc000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 9, 0xb) = 0xb75dc000 15297 mmap2(0xb75de000, 158716, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb75de000 15297 close(9) = 0 15297 munmap(0xb7610000, 76730) = 0 15297 read(7, "", 4096) = 0 15297 close(7) = 0 15297 munmap(0xb77ba000, 4096) = 0 15297 open("/etc/pam.d/common-session", O_RDONLY|O_LARGEFILE) = 7 15297 fstat64(7, {st_mode=S_IFREG|0644, st_size=405, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77ba000 15297 read(7, "#\n# /etc/pam.d/common-session - "..., 4096) = 405 15297 open("/lib/security/pam_limits.so", O_RDONLY) = 9 15297 read(9, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\f\0"..., 512) = 512 15297 fstat64(9, {st_mode=S_IFREG|0755, st_size=11812, ...}) = 0 15297 mmap2(NULL, 14440, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 9, 0) = 0xb7639000 15297 madvise(0xb7639000, 14440, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb763c000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 9, 0x2) = 0xb763c000 15297 close(9) = 0 15297 read(7, "", 4096) = 0 15297 close(7) = 0 15297 munmap(0xb77ba000, 4096) = 0 15297 open("/lib/security/pam_xauth.so", O_RDONLY) = 7 15297 read(7, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\20"..., 512) = 512 15297 fstat64(7, {st_mode=S_IFREG|0755, st_size=12912, ...}) = 0 15297 mmap2(NULL, 15540, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0xb761f000 15297 madvise(0xb761f000, 15540, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb7622000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0x2) = 0xb7622000 15297 close(7) = 0 15297 read(6, "", 4096) = 0 15297 close(6) = 0 15297 munmap(0xb77bd000, 4096) = 0 15297 open("/etc/pam.d/other", O_RDONLY|O_LARGEFILE) = 6 15297 fstat64(6, {st_mode=S_IFREG|0644, st_size=251, ...}) = 0 15297 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb77bd000 15297 read(6, "#%PAM-1.0\nauth\t required\tpam_war"..., 4096) = 251 15297 open("/lib/security/pam_warn.so", O_RDONLY) = 7 15297 read(7, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0\5\0\000"..., 512) = 512 15297 fstat64(7, {st_mode=S_IFREG|0755, st_size=4152, ...}) = 0 15297 mmap2(NULL, 6836, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0xb77b9000 15297 madvise(0xb77b9000, 6836, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb77ba000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0) = 0xb77ba000 15297 close(7) = 0 15297 open("/lib/security/pam_deny.so", O_RDONLY) = 7 15297 read(7, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\4\0"..., 512) = 512 15297 fstat64(7, {st_mode=S_IFREG|0755, st_size=3064, ...}) = 0 15297 mmap2(NULL, 5796, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 7, 0) = 0xb7637000 15297 madvise(0xb7637000, 5796, MADV_SEQUENTIAL|0x1) = 0 15297 mmap2(0xb7638000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 7, 0) = 0xb7638000 15297 close(7) = 0 15297 read(6, "", 4096) = 0 15297 close(6) = 0 15297 munmap(0xb77bd000, 4096) = 0 15297 time(NULL) = 1389351342 15297 getuid32() = 103 15297 socket(PF_NETLINK, SOCK_RAW, 9) = 6 15297 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 15297 readlink("/proc/self/exe", "/usr/NX/bin/nxexec", 4095) = 18 15297 readlink("/proc/self/fd/0", "pipe:[658961]", 31) = 13 15297 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfae35a8) = -1 EINVAL (Invalid argument) 15297 readlink("/proc/self/fd/1", "pipe:[658962]", 31) = 13 15297 ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfae35a8) = -1 EINVAL (Invalid argument) 15297 readlink("/proc/self/fd/2", "/usr/NX/var/log/nxerror.log", 31) = 27 15297 ioctl(2, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfae35a8) = -1 ENOTTY (Inappropriate ioctl for device) 15297 sendto(6, "|\0\0\0L\4\5\0\1\0\0\0\0\0\0\0PAM: authenticat"..., 124, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 124 15297 poll([{fd=6, events=POLLIN, revents=POLLIN}], 1, 100) = 1 15297 recvfrom(6, "$\0\0\0\2\0\0\0\1\0\0\0\301;\0\0\0\0\0\0|\0\0\0L\4\5\0"..., 8988, MSG_PEEK|MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36 15297 recvfrom(6, "$\0\0\0\2\0\0\0\1\0\0\0\301;\0\0\0\0\0\0|\0\0\0L\4\5\0"..., 8988, MSG_DONTWAIT, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36 15297 close(6) = 0 15297 write(2, "nxexecPAMCheckCredentials: Authe"..., 64) = 64 15297 munmap(0xb77bb000, 6056) = 0 15297 munmap(0xb7645000, 12780) = 0 15297 munmap(0xb763d000, 32204) = 0 15297 munmap(0xb7605000, 44864) = 0 15297 munmap(0xb75d0000, 216060) = 0 15297 munmap(0xb7639000, 14440) = 0 15297 munmap(0xb761f000, 15540) = 0 15297 munmap(0xb77b9000, 6836) = 0 15297 munmap(0xb7637000, 5796) = 0 15297 munmap(0xb77be000, 42272) = 0 15297 munmap(0xb7623000, 74016) = 0 15297 write(1, "Login failed.\n", 14 15095 <... select resumed> ) = 1 (in [14], left {4, 984000}) 15297 <... write resumed> ) = 14 15095 gettimeofday({1389351342, 197575}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 read(14, "Login failed.\n", 4096) = 14 15095 gettimeofday({1389351342, 198029}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 198226}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 198444}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(15, [9 14], NULL, NULL, {5, 0} 15297 exit_group(1) = ? 15095 <... select resumed> ) = 1 (in [14], left {5, 0}) 15095 gettimeofday( 15104 <... restart_syscall resumed> ) = ? ERESTART_RESTARTBLOCK (To be restarted) 15095 <... gettimeofday resumed> {1389351342, 198854}, NULL) = 0 15104 --- SIGCHLD (Child exited) @ 0 (0) --- 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15104 waitpid(15297, 15095 read(14, "", 4096) = 0 15104 <... waitpid resumed> [{WIFEXITED(s) && WEXITSTATUS(s) == 1}], WNOHANG|WSTOPPED) = 15297 15104 send(8, "\21\0\0\0", 4, 0) = 4 15104 sigreturn( 15095 close(14 15104 <... sigreturn resumed> ) = ? (mask now []) 15095 <... close resumed> ) = 0 15104 rt_sigprocmask(SIG_SETMASK, [HUP INT QUIT USR1 USR2 PIPE ALRM TERM CHLD TSTP TTIN TTOU VTALRM WINCH IO], NULL, 8) = 0 15104 rt_sigprocmask(SIG_SETMASK, [], 15095 close(13 15104 <... rt_sigprocmask resumed> [HUP INT QUIT USR1 USR2 PIPE ALRM TERM CHLD TSTP TTIN TTOU VTALRM WINCH IO], 8) = 0 15095 <... close resumed> ) = 0 15104 nanosleep({4294, 966296000}, 15095 gettimeofday({1389351342, 199850}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 200024}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 time(NULL) = 1389351342 15095 gettimeofday({1389351342, 200290}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 select(10, [9], NULL, NULL, {0, 1000}) = 1 (in [9], left {0, 1000}) 15095 gettimeofday({1389351342, 200571}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 recv(9, "\21\0\0\0", 4096, 0) = 4 15095 gettimeofday({1389351342, 201227}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 201405}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 gettimeofday({1389351342, 201904}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 write(10, "10:55:42:201.904 NXSERVER-4.0.36"..., 132) = 132 15095 gettimeofday({1389351342, 202394}, NULL) = 0 15095 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=56, ...}) = 0 15095 write(10, "10:55:42:202.394 NXSERVER-4.0.36"..., 119) = 119 15095 send(7, "NX> 404 ERROR: Wrong password or"..., 40, 0) = 40 15109 <... pselect6 resumed> , [HUP INT USR1 USR2 PIPE ALRM TERM CHLD TSTP TTIN TTOU VTALRM WINCH IO], 8) = 1 (in [11]) 15095 send(7, "NX> 999 Bye.\n", 13, 0 15109 futex(0x98e152c, FUTEX_WAKE, 1 15095 <... send resumed> ) = 13 15106 <... futex resumed> ) = 0 15109 <... futex resumed> ) = 1 15106 gettimeofday( 15109 futex(0x98ede80, FUTEX_WAIT, 0, NULL 15106 <... gettimeofday resumed> {1389351342, 203171}, NULL) = 0 15106 recv(11, 15095 close(7) = 0 15106 <... recv resumed> "NX> 404 ERROR: Wrong password or"..., 131072, 0) = 53 15095 futex(0x98de02c, FUTEX_WAKE, 1 15106 send(6, "\27\3\3\0I\n\242\345\2571\312\227\2765\3\364\341q\26g\217"..., 78, 0 15095 <... futex resumed> ) = 1 15105 <... futex resumed> ) = 0 15106 <... send resumed> ) = 78 15095 futex(0x9890b98, FUTEX_WAIT, 0, NULL 15105 gettimeofday({1389351342, 203854}, NULL) = 0 15106 futex(0x98ede80, FUTEX_WAKE, 1) = 1 15109 <... futex resumed> ) = 0 15105 gettimeofday( 15106 gettimeofday( 15109 pselect6(12, [11], NULL, NULL, NULL 15106 <... gettimeofday resumed> {1389351342, 204038}, NULL) = 0 15109 <... pselect6 resumed> , [HUP INT USR1 USR2 PIPE ALRM TERM CHLD TSTP TTIN TTOU VTALRM WINCH IO], 8) = 1 (in [11]) 15106 futex(0x98e152c, FUTEX_WAIT, 0, NULL 15105 <... gettimeofday resumed> {1389351342, 204042}, NULL) = 0 15109 futex(0x98e152c, FUTEX_WAKE, 1 15106 <... futex resumed> ) = -1 EAGAIN (Resource temporarily unavailable) 15109 <... futex resumed> ) = 0 15106 gettimeofday( 15109 futex(0x98ede80, FUTEX_WAIT, 0, NULL 15106 <... gettimeofday resumed> {1389351342, 204259}, NULL) = 0 15106 recv(11, "", 131072, 0) = 0 15106 shutdown(11, 1 /* send */ 15105 futex(0x9886890, FUTEX_WAIT, 2, NULL 15106 <... shutdown resumed> ) = 0 15106 futex(0x98ede80, FUTEX_WAKE, 1) = 1 15109 <... futex resumed> ) = 0 15106 futex(0xb2f60be8, FUTEX_WAIT, 15109, NULL 15109 _exit(0) = ? 15106 <... futex resumed> ) = 0 15106 close(11) = 0 15106 futex(0x98de02c, FUTEX_WAKE, 1) = 0 15106 futex(0x9886890, FUTEX_WAKE, 1 15105 <... futex resumed> ) = 0 15106 <... futex resumed> ) = 1 15105 futex(0x9886890, FUTEX_WAKE, 1 15106 futex(0xb5d07bc4, FUTEX_WAKE, 2147483647 15105 <... futex resumed> ) = 0 15106 <... futex resumed> ) = 0 15105 gettimeofday( 15106 _exit(0) = ? 15105 <... gettimeofday resumed> {1389351342, 205900}, NULL) = 0 15105 gettimeofday({1389351342, 206006}, NULL) = 0 15105 gettimeofday({1389351342, 206044}, NULL) = 0 15105 gettimeofday({1389351342, 206113}, NULL) = 0 15105 write(2, "Info: ", 6) = 6 15105 write(2, "Connection from ", 16) = 16 15105 write(2, "10.61.15.135", 12) = 12 15105 write(2, " port ", 6) = 6 15105 write(2, "42282", 5) = 5 15105 write(2, " closed on ", 11) = 11 15105 write(2, "Fri Jan 10 10:55:42 2014", 24) = 24 15105 write(2, ".\n", 2) = 2 15105 gettimeofday({1389351342, 206576}, NULL) = 0 15105 munmap(0xb2f61000, 135168) = 0 15105 munmap(0xb2f82000, 135168) = 0 15105 munmap(0xb271e000, 135168) = 0 15105 munmap(0xb26fd000, 135168) = 0 15105 munmap(0xb273f000, 135168) = 0 15105 gettimeofday({1389351342, 207944}, NULL) = 0 15105 gettimeofday({1389351342, 207978}, NULL) = 0 15105 write(2, "Info: ", 6) = 6 15105 write(2, "Handler", 7) = 7 15105 write(2, " with pid ", 10) = 10 15105 write(2, "15095", 5) = 5 15105 write(2, " terminated on ", 15) = 15 15105 write(2, "Fri Jan 10 10:55:42 2014", 24) = 24 15105 write(2, ".\n", 2) = 2 15105 futex(0x9890b98, FUTEX_WAKE, 1 15095 <... futex resumed> ) = 0 15105 <... futex resumed> ) = 1 15095 futex(0xb4fa6be8, FUTEX_WAIT, 15105, NULL 15105 _exit(0) = ? 15095 <... futex resumed> ) = 0 15095 tgkill(15095, 15108, SIGQUIT) = 0 15095 futex(0x98e1bb8, FUTEX_WAKE, 1 15108 <... pselect6 resumed> , [HUP INT USR1 USR2 PIPE ALRM TERM CHLD TSTP TTIN TTOU VTALRM WINCH IO], 8) = ? ERESTARTNOHAND (To be restarted) 15095 <... futex resumed> ) = 0 15108 --- SIGQUIT (Quit) @ 0 (0) --- 15095 futex(0xb37a3be8, FUTEX_WAIT, 15108, NULL 15108 sigreturn() = ? (mask now [HUP INT QUIT USR1 USR2 PIPE ALRM TERM CHLD TSTP TTIN TTOU VTALRM WINCH IO]) 15108 _exit(0) = ? 15095 <... futex resumed> ) = 0 15095 close(6) = 0 15095 close(8) = 0 15095 close(9) = 0 15095 close(5) = 0 15095 close(10) = 0 15095 munmap(0xb732a000, 401408) = 0 15095 munmap(0xb7250000, 798720) = 0 15095 munmap(0xb738c000, 401408) = 0 15095 munmap(0xb73ee000, 798720) = 0 15095 tgkill(15095, 15104, SIGQUIT) = 0 15104 <... nanosleep resumed> 0) = ? ERESTART_RESTARTBLOCK (To be restarted) 15095 futex(0x98365d8, FUTEX_WAKE, 1 15104 --- SIGQUIT (Quit) @ 0 (0) --- 15095 <... futex resumed> ) = 0 15104 sigreturn( 15095 futex(0xb57c6be8, FUTEX_WAIT, 15104, NULL 15104 <... sigreturn resumed> ) = ? (mask now []) 15104 rt_sigprocmask(SIG_SETMASK, [HUP INT QUIT USR1 USR2 PIPE ALRM TERM CHLD TSTP TTIN TTOU VTALRM WINCH IO], NULL, 8) = 0 15104 _exit(0) = ? 15095 <... futex resumed> ) = 0 15095 munmap(0xb2760000, 8392704) = 0 15095 setitimer(ITIMER_REAL, {it_interval={0, 0}, it_value={0, 0}}, NULL) = 0 15095 rt_sigaction(SIGHUP, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGINT, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGQUIT, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGUSR1, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGUSR2, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGALRM, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGTERM, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGCHLD, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGTSTP, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGTTIN, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGTTOU, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGVTALRM, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGWINCH, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigaction(SIGIO, {SIG_DFL}, NULL, 8) = 0 15095 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 15095 futex(0x9885b00, FUTEX_WAKE, 1) = 1 15107 <... futex resumed> ) = 0 15095 futex(0xb3fa4be8, FUTEX_WAIT, 15107, NULL 15107 _exit(0) = ? 15095 <... futex resumed> ) = -1 EAGAIN (Resource temporarily unavailable) 15095 munmap(0xb3fa5000, 8392704) = 0 15095 exit_group(0) = ?