[Snort-users] snort suddenly not capturing packets

Ben Jacobs-Swearingen bjsdaiyu at ...11827...
Wed Jan 8 19:39:02 EST 2014


Hello:

I recently restarted snort  on an ArchLinux ARM (Raspberry Pi) sensor with
new rules (and a slightly modified snort.conf) ; the post-reboot snort will
launch without explicit errors but appears not to be listening to any
interfaces on the sensor and I am unable to figure out why.  Snort had been
working correctly for months prior to this change.

The sensor has two interfaces, eth0 and eth1; mirrored traffic (for snort
to process) is being sent to eth0 (which is up and running though it does
not have a configured IP address), while eth1 has a configured address on
an admin segment. prior to changing the rules and rebooting snort, snort
was listening to and correctly processing traffic on eth0.

-  "tcpdump -i eth0" works just fine, it sees all mirrored traffic

- "snort -dev -l . -i eth0" makes it to the "listening" stage but appears
to not pick up any of the traffic i generate across the interface; again,
tcpdump sees this traffic just fine.  "snort -dev ..."  also does not work
when I set it to listen on eth1 (tcpdump works there as well).

- "snort -r <bad.pcap> -c .../snort.conf" with <bad.pcap> containing
traffic I want flagged DOES work correctly: the traffic is processed
according to the rules, alerts are correct and sent to the correct
repository.

I suspect my changes to snort.conf might have introduced a problem that I
simply am not seeing so have attached the conf file for examination (but am
confused in that case why "snort -r" is working since it's using the same
conf file).

Alternately, I have attached an strace in case something with the interface
setup somehow got screwed up (as suggest by the fact that snort replay is
working). I see in strace there are some errors with setsockopt(...) which
might be more relevant to the capturing issue; any idea what might be
causing those, assuming that those aren't par for the course?

The only similar posts I could find on this topic discuss various issues
with DAQ; I don't see how those might apply in my case since the
installation was working for months prior to today.

Thanks for any help.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140108/162bcdd8/attachment.html>
-------------- next part --------------
execve("/usr/local/bin/snort", ["snort", "-c", "/usr/local/etc/snort/snort.conf", "-D"], [/* 13 vars */]) = 0
brk(0)                                  = 0x23d1000
uname({sys="Linux", node="alarmpi", ...}) = 0
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=25796, ...}) = 0
mmap2(NULL, 25796, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb6f7c000
close(3)                                = 0
open("/usr/lib/libdnet.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0p,\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=41432, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6fa7000
mmap2(NULL, 81036, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6f68000
mprotect(0xb6f71000, 32768, PROT_NONE)  = 0
mmap2(0xb6f79000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x9000) = 0xb6f79000
mmap2(0xb6f7a000, 7308, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb6f7a000
close(3)                                = 0
open("/usr/lib/libcrypto.so.1.0.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0 \300\3\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0555, st_size=1745562, ...}) = 0
mmap2(NULL, 1476236, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6dff000
mprotect(0xb6f49000, 32768, PROT_NONE)  = 0
mmap2(0xb6f51000, 81920, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14a000) = 0xb6f51000
mmap2(0xb6f65000, 9868, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb6f65000
close(3)                                = 0
open("/usr/lib/libpcre.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0h\20\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=394844, ...}) = 0
mmap2(NULL, 426296, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6d96000
mprotect(0xb6df6000, 28672, PROT_NONE)  = 0
mmap2(0xb6dfd000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5f000) = 0xb6dfd000
close(3)                                = 0
open("/usr/lib/libnsl.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0@/\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=71616, ...}) = 0
mmap2(NULL, 112384, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6d7a000
mprotect(0xb6d8b000, 28672, PROT_NONE)  = 0
mmap2(0xb6d92000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0xb6d92000
mmap2(0xb6d94000, 5888, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb6d94000
close(3)                                = 0
open("/usr/lib/libuuid.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\f\17\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=18208, ...}) = 0
mmap2(NULL, 49396, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6d6d000
mprotect(0xb6d71000, 28672, PROT_NONE)  = 0
mmap2(0xb6d78000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0xb6d78000
close(3)                                = 0
open("/usr/lib/libm.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\340;\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=427592, ...}) = 0
mmap2(NULL, 458888, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6cfc000
mprotect(0xb6d64000, 28672, PROT_NONE)  = 0
mmap2(0xb6d6b000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x67000) = 0xb6d6b000
close(3)                                = 0
open("/usr/lib/libdl.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\220\t\0\0004\0\0\0"..., 512) = 512
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6fa6000
fstat64(3, {st_mode=S_IFREG|0755, st_size=9808, ...}) = 0
mmap2(NULL, 41144, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6cf1000
mprotect(0xb6cf3000, 28672, PROT_NONE)  = 0
mmap2(0xb6cfa000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0xb6cfa000
close(3)                                = 0
open("/usr/lib/libsfbpf.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\340\20\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=137364, ...}) = 0
mmap2(NULL, 170904, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6cc7000
mprotect(0xb6ce8000, 28672, PROT_NONE)  = 0
mmap2(0xb6cef000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x20000) = 0xb6cef000
close(3)                                = 0
open("/usr/lib/libpcap.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\364W\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=228260, ...}) = 0
mmap2(NULL, 261808, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6c87000
mprotect(0xb6cbe000, 28672, PROT_NONE)  = 0
mmap2(0xb6cc5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x36000) = 0xb6cc5000
close(3)                                = 0
open("/usr/lib/libz.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0H\30\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=78240, ...}) = 0
mmap2(NULL, 109572, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6c6c000
mprotect(0xb6c7f000, 28672, PROT_NONE)  = 0
mmap2(0xb6c86000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12000) = 0xb6c86000
close(3)                                = 0
open("/usr/lib/libpthread.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0<X\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=127034, ...}) = 0
mmap2(NULL, 123416, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6c4d000
mprotect(0xb6c61000, 28672, PROT_NONE)  = 0
mmap2(0xb6c68000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x13000) = 0xb6c68000
mmap2(0xb6c6a000, 4632, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb6c6a000
close(3)                                = 0
open("/usr/lib/libgcc_s.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\210\321\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=122392, ...}) = 0
mmap2(NULL, 153776, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6c27000
mprotect(0xb6c45000, 28672, PROT_NONE)  = 0
mmap2(0xb6c4c000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1d000) = 0xb6c4c000
close(3)                                = 0
open("/usr/lib/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0l\202\1\0004\0\0\0"..., 512) = 512
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6fa5000
fstat64(3, {st_mode=S_IFREG|0755, st_size=1526265, ...}) = 0
mmap2(NULL, 1254776, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6af4000
mprotect(0xb6c19000, 32768, PROT_NONE)  = 0
mmap2(0xb6c21000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x125000) = 0xb6c21000
mmap2(0xb6c24000, 9592, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb6c24000
close(3)                                = 0
open("/usr/lib/libusb-1.0.so.0", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0<+\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=76268, ...}) = 0
mmap2(NULL, 107824, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6ad9000
mprotect(0xb6aeb000, 32768, PROT_NONE)  = 0
mmap2(0xb6af3000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12000) = 0xb6af3000
close(3)                                = 0
open("/usr/lib/libnl-genl-3.so.200", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\10\31\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=15896, ...}) = 0
mmap2(NULL, 47244, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6acd000
mprotect(0xb6ad1000, 28672, PROT_NONE)  = 0
mmap2(0xb6ad8000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3000) = 0xb6ad8000
close(3)                                = 0
open("/usr/lib/libnl-3.so.200", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0`X\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=94884, ...}) = 0
mmap2(NULL, 126392, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6aae000
mprotect(0xb6ac4000, 32768, PROT_NONE)  = 0
mmap2(0xb6acc000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x16000) = 0xb6acc000
close(3)                                = 0
open("/usr/lib/libdbus-1.so.3", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0xZ\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=235952, ...}) = 0
mmap2(NULL, 267672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6a6c000
mprotect(0xb6aa5000, 28672, PROT_NONE)  = 0
mmap2(0xb6aac000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x38000) = 0xb6aac000
close(3)                                = 0
open("/usr/lib/libudev.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\334'\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=63024, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6fa4000
mmap2(NULL, 96312, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6a54000
mprotect(0xb6a63000, 28672, PROT_NONE)  = 0
mmap2(0xb6a6a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe000) = 0xb6a6a000
close(3)                                = 0
open("/usr/lib/librt.so.1", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\20\30\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=26660, ...}) = 0
mmap2(NULL, 57908, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6a45000
mprotect(0xb6a4b000, 28672, PROT_NONE)  = 0
mmap2(0xb6a52000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5000) = 0xb6a52000
close(3)                                = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6fa3000
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6fa2000
set_tls(0xb6fa24c0, 0xb6fa2bc8, 0xb6faa000, 0xb6fa24c0, 0xb6faa000) = 0
mprotect(0xb6c21000, 8192, PROT_READ)   = 0
mprotect(0xb6c68000, 4096, PROT_READ)   = 0
mprotect(0xb6a52000, 4096, PROT_READ)   = 0
mprotect(0xb6cfa000, 4096, PROT_READ)   = 0
mprotect(0xb6a6a000, 4096, PROT_READ)   = 0
mprotect(0xb6aac000, 4096, PROT_READ)   = 0
mprotect(0xb6d6b000, 4096, PROT_READ)   = 0
mprotect(0xb6cef000, 4096, PROT_READ)   = 0
mprotect(0xb6d78000, 4096, PROT_READ)   = 0
mprotect(0xb6d92000, 4096, PROT_READ)   = 0
mprotect(0xb6dfd000, 4096, PROT_READ)   = 0
mprotect(0xb6fa9000, 4096, PROT_READ)   = 0
munmap(0xb6f7c000, 25796)               = 0
set_tid_address(0xb6fa2068)             = 774
set_robust_list(0xb6fa2070, 12)         = 0
futex(0xbeda7c78, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 1, NULL, b6c69000) = -1 EAGAIN (Resource temporarily unavailable)
rt_sigaction(SIGRTMIN, {0xb6c52354, [], SA_SIGINFO|0x4000000}, NULL, 8) = 0
rt_sigaction(SIGRT_1, {0xb6c52204, [], SA_RESTART|SA_SIGINFO|0x4000000}, NULL, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0
getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
brk(0)                                  = 0x23d1000
brk(0x23f2000)                          = 0x23f2000
open("/proc/net/psched", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "000003e8 00000040 000f4240 3b9ac"..., 1024) = 36
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
rt_sigprocmask(SIG_SETMASK, ~[ILL TRAP BUS FPE SEGV RTMIN RT_1], [], 8) = 0
rt_sigaction(SIGILL, {0xb6e3ec84, ~[ILL TRAP BUS FPE SEGV RTMIN RT_1], 0x4000000 /* SA_??? */}, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, ~[ILL TRAP BUS FPE KILL SEGV STOP RTMIN RT_1], 8) = 0
--- SIGILL {si_signo=SIGILL, si_code=ILL_ILLOPC, si_addr=0xb6e3eca0} ---
rt_sigprocmask(SIG_SETMASK, ~[ILL TRAP BUS FPE KILL SEGV STOP RTMIN RT_1], NULL, 8) = 0
rt_sigprocmask(SIG_BLOCK, NULL, ~[ILL TRAP BUS FPE KILL SEGV STOP RTMIN RT_1], 8) = 0
--- SIGILL {si_signo=SIGILL, si_code=ILL_ILLOPC, si_addr=0xb6e3eca8} ---
rt_sigprocmask(SIG_SETMASK, ~[ILL TRAP BUS FPE KILL SEGV STOP RTMIN RT_1], NULL, 8) = 0
rt_sigaction(SIGILL, {SIG_DFL, [], 0x4000000 /* SA_??? */}, NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
rt_sigaction(SIGTERM, {0x34b5c, [], 0x4000000 /* SA_??? */}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGINT, {0x34b5c, [], 0x4000000 /* SA_??? */}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGQUIT, {0x34b5c, [], 0x4000000 /* SA_??? */}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGUSR1, {0x33cc0, [], 0x4000000 /* SA_??? */}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGHUP, {0x33ce8, [], 0x4000000 /* SA_??? */}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGUSR2, {0x33cd4, [], 0x4000000 /* SA_??? */}, {SIG_DFL, [], 0}, 8) = 0
rt_sigaction(SIGURG, {0x33d00, [], 0x4000000 /* SA_??? */}, {SIG_DFL, [], 0}, 8) = 0
open("/etc/nsswitch.conf", O_RDONLY|O_CLOEXEC) = 3
fcntl64(3, F_GETFD)                     = 0x1 (flags FD_CLOEXEC)
fstat64(3, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# Begin /etc/nsswitch.conf\n\npass"..., 4096) = 234
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=25796, ...}) = 0
mmap2(NULL, 25796, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb6f7c000
close(3)                                = 0
open("/usr/lib/libnss_files.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\300\31\0\0004\0\0\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=47024, ...}) = 0
mmap2(NULL, 78844, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xb6a31000
mprotect(0xb6a3c000, 28672, PROT_NONE)  = 0
mmap2(0xb6a43000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0xb6a43000
close(3)                                = 0
mprotect(0xb6a43000, 4096, PROT_READ)   = 0
munmap(0xb6f7c000, 25796)               = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fcntl64(3, F_GETFD)                     = 0x1 (flags FD_CLOEXEC)
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/etc/protocols", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=3253, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(3, "# See the full IANA XML file at:"..., 4096) = 3253
close(3)                                = 0
munmap(0xb6f82000, 4096)                = 0
gettimeofday({1389227393, 265883}, NULL) = 0
open("/etc/localtime", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
socket(PF_LOCAL, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 3
connect(3, {sa_family=AF_LOCAL, sun_path="/dev/log"}, 110) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 52, MSG_NOSIGNAL) = 52
gettimeofday({1389227393, 272925}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227393, 274098}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227393, 278174}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227393, 293823}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 60, MSG_NOSIGNAL) = 60
gettimeofday({1389227393, 295303}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 55, MSG_NOSIGNAL) = 55
gettimeofday({1389227393, 297358}, NULL) = 0
mmap2(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb69f0000
mmap2(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb69af000
gettimeofday({1389227393, 301580}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 85, MSG_NOSIGNAL) = 85
brk(0x2417000)                          = 0x2417000
mmap2(NULL, 1048576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb68af000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb682e000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb67ad000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb672c000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb66ab000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb662a000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb65a9000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6528000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb64a7000
brk(0x243b000)                          = 0x243b000
mmap2(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6466000
mmap2(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6425000
brk(0x2467000)                          = 0x2467000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb63a4000
open("/usr/local/etc/snort/snort.conf", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=19904, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(4, "#-------------------------------"..., 4096) = 4096
gettimeofday({1389227393, 355969}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227393, 361743}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 389, MSG_NOSIGNAL) = 389
gettimeofday({1389227393, 367235}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227393, 370279}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 68, MSG_NOSIGNAL) = 68
gettimeofday({1389227393, 379779}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 50, MSG_NOSIGNAL) = 50
gettimeofday({1389227393, 380907}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227393, 384508}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227393, 385556}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 47, MSG_NOSIGNAL) = 47
gettimeofday({1389227393, 386632}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227393, 395252}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227393, 396314}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 39, MSG_NOSIGNAL) = 39
gettimeofday({1389227393, 397291}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227393, 399534}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227393, 404495}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 49, MSG_NOSIGNAL) = 49
gettimeofday({1389227393, 405469}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227393, 413849}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227393, 414940}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 51, MSG_NOSIGNAL) = 51
gettimeofday({1389227393, 415905}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227393, 423519}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 68, MSG_NOSIGNAL) = 68
gettimeofday({1389227393, 425312}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 397, MSG_NOSIGNAL) = 397
gettimeofday({1389227393, 426312}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227393, 431082}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227393, 436461}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 51, MSG_NOSIGNAL) = 51
gettimeofday({1389227393, 441781}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
read(4, "reprocessor set these\n# Currentl"..., 4096) = 4096
gettimeofday({1389227393, 449113}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 43, MSG_NOSIGNAL) = 43
gettimeofday({1389227393, 454456}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227393, 459587}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227393, 464777}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
stat64("/usr/local/lib/snort_dynamicpreprocessor/", {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
stat64("/usr/local/lib/snort_dynamicengine/libsf_engine.so", {st_mode=S_IFREG|0755, st_size=249636, ...}) = 0
read(4, " 8080 8085 8088 8090 8118 8123 8"..., 4096) = 4096
read(4, "TYPE USER } \\\n    chk_str_fmt { "..., 4096) = 4096
read(4, "sensitive_data\npreprocessor sens"..., 4096) = 3520
stat64("classification.config", 0xbeda79a8) = -1 ENOENT (No such file or directory)
open("/usr/local/etc/snort/classification.config", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=3854, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# $Id: classification.config,v 1"..., 4096) = 3854
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("reference.config", 0xbeda79a8)  = -1 ENOENT (No such file or directory)
open("/usr/local/etc/snort/reference.config", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=746, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# $Id: reference.config,v 1.3 20"..., 4096) = 746
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/local.rules", {st_mode=S_IFREG|0644, st_size=1579, ...}) = 0
open("/usr/local/etc/snort/rules/local.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1579, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1579
read(5, "", 4096)                       = 0
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/attack-responses.rules", {st_mode=S_IFREG|0644, st_size=1061, ...}) = 0
open("/usr/local/etc/snort/rules/attack-responses.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1061, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1061
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/backdoor.rules", {st_mode=S_IFREG|0644, st_size=1037, ...}) = 0
open("/usr/local/etc/snort/rules/backdoor.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1037, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1037
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/botnet-cnc.rules", {st_mode=S_IFREG|0644, st_size=1043, ...}) = 0
open("/usr/local/etc/snort/rules/botnet-cnc.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1043, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1043
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/spyware-put.rules", {st_mode=S_IFREG|0644, st_size=1046, ...}) = 0
open("/usr/local/etc/snort/rules/spyware-put.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1046, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1046
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/virus.rules", {st_mode=S_IFREG|0644, st_size=1028, ...}) = 0
open("/usr/local/etc/snort/rules/virus.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1028, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1028
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/web-client.rules", {st_mode=S_IFREG|0644, st_size=1043, ...}) = 0
open("/usr/local/etc/snort/rules/web-client.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1043, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1043
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("threshold.conf", 0xbeda79a8)    = -1 ENOENT (No such file or directory)
open("/usr/local/etc/snort/threshold.conf", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=2556, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Configure Thresholding and Sup"..., 4096) = 2556
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
read(4, "", 4096)                       = 0
close(4)                                = 0
munmap(0xb6f82000, 4096)                = 0
gettimeofday({1389227393, 577020}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 57, MSG_NOSIGNAL) = 57
gettimeofday({1389227393, 582899}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 109, MSG_NOSIGNAL) = 109
futex(0xb6cfb0ac, FUTEX_WAKE_PRIVATE, 2147483647) = 0
open("/usr/local/lib/snort_dynamicengine/libsf_engine.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0 \23\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=249636, ...}) = 0
mmap2(NULL, 151384, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb637f000
mprotect(0xb638c000, 28672, PROT_NONE)  = 0
mmap2(0xb6393000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0xc000) = 0xb6393000
mmap2(0xb6394000, 65368, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb6394000
close(4)                                = 0
gettimeofday({1389227393, 594575}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 595627}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 120, MSG_NOSIGNAL) = 120
openat(AT_FDCWD, "/usr/local/lib/snort_dynamicpreprocessor/", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 4
getdents(4, /* 72 entries */, 32768)    = 2564
getdents(4, /* 0 entries */, 32768)     = 0
close(4)                                = 0
gettimeofday({1389227393, 607304}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 137, MSG_NOSIGNAL) = 137
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_dns_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0P\7\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=116213, ...}) = 0
mmap2(NULL, 46048, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb6373000
mprotect(0xb6376000, 32768, PROT_NONE)  = 0
mmap2(0xb637e000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x3000) = 0xb637e000
close(4)                                = 0
gettimeofday({1389227393, 620677}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 621668}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 140, MSG_NOSIGNAL) = 140
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_modbus_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\\\7\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=181124, ...}) = 0
mmap2(NULL, 47336, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb6367000
mprotect(0xb636b000, 28672, PROT_NONE)  = 0
mmap2(0xb6372000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x3000) = 0xb6372000
close(4)                                = 0
gettimeofday({1389227393, 635390}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 636389}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 137, MSG_NOSIGNAL) = 137
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_sdf_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\250\n\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=228870, ...}) = 0
mmap2(NULL, 55736, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb6359000
mprotect(0xb635f000, 28672, PROT_NONE)  = 0
mmap2(0xb6366000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x5000) = 0xb6366000
close(4)                                = 0
gettimeofday({1389227393, 645508}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 646507}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 138, MSG_NOSIGNAL) = 138
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_dnp3_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\350\10\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=232406, ...}) = 0
mmap2(NULL, 54640, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb634b000
mprotect(0xb6350000, 32768, PROT_NONE)  = 0
mmap2(0xb6358000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x5000) = 0xb6358000
close(4)                                = 0
gettimeofday({1389227393, 658669}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 659674}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 144, MSG_NOSIGNAL) = 144
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_reputation_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\350\t\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=220560, ...}) = 0
mmap2(NULL, 64604, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb633b000
mprotect(0xb6343000, 28672, PROT_NONE)  = 0
mmap2(0xb634a000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x7000) = 0xb634a000
close(4)                                = 0
gettimeofday({1389227393, 675801}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 676795}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 143, MSG_NOSIGNAL) = 143
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_ftptelnet_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0000\f\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=554945, ...}) = 0
mmap2(NULL, 108488, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb6320000
mprotect(0xb6332000, 32768, PROT_NONE)  = 0
mmap2(0xb633a000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x12000) = 0xb633a000
close(4)                                = 0
gettimeofday({1389227393, 688268}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 689875}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 137, MSG_NOSIGNAL) = 137
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_sip_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0008\v\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=305831, ...}) = 0
mmap2(NULL, 68044, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb630f000
mprotect(0xb6318000, 28672, PROT_NONE)  = 0
mmap2(0xb631f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x8000) = 0xb631f000
close(4)                                = 0
gettimeofday({1389227393, 706181}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 707315}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 138, MSG_NOSIGNAL) = 138
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_imap_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\f\f\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=317680, ...}) = 0
mmap2(NULL, 72000, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb62fd000
mprotect(0xb6306000, 28672, PROT_NONE)  = 0
mmap2(0xb630d000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x8000) = 0xb630d000
mmap2(0xb630e000, 2368, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb630e000
close(4)                                = 0
gettimeofday({1389227393, 723815}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 724842}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 137, MSG_NOSIGNAL) = 137
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_pop_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\244\n\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=318310, ...}) = 0
mmap2(NULL, 73592, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb62eb000
mprotect(0xb62f4000, 32768, PROT_NONE)  = 0
mmap2(0xb62fc000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x9000) = 0xb62fc000
close(4)                                = 0
gettimeofday({1389227393, 730511}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 731526}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 137, MSG_NOSIGNAL) = 137
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_ssl_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0x\7\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=131008, ...}) = 0
mmap2(NULL, 48872, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb62df000
mprotect(0xb62e3000, 28672, PROT_NONE)  = 0
mmap2(0xb62ea000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x3000) = 0xb62ea000
close(4)                                = 0
gettimeofday({1389227393, 747625}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 748603}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 137, MSG_NOSIGNAL) = 137
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_gtp_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\354\24\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=207536, ...}) = 0
mmap2(NULL, 73664, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb62cd000
mprotect(0xb62d3000, 28672, PROT_NONE)  = 0
mmap2(0xb62da000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x5000) = 0xb62da000
mmap2(0xb62dd000, 8128, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb62dd000
close(4)                                = 0
gettimeofday({1389227393, 763806}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 764822}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 138, MSG_NOSIGNAL) = 138
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_dce2_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\0\32\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=1259729, ...}) = 0
mmap2(NULL, 457816, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb625d000
mprotect(0xb628b000, 32768, PROT_NONE)  = 0
mmap2(0xb6293000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x2e000) = 0xb6293000
mmap2(0xb6294000, 232536, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb6294000
close(4)                                = 0
gettimeofday({1389227393, 771022}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 771999}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 138, MSG_NOSIGNAL) = 138
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_smtp_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0\234\f\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=427365, ...}) = 0
mmap2(NULL, 96800, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb6245000
mprotect(0xb6253000, 32768, PROT_NONE)  = 0
mmap2(0xb625b000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0xe000) = 0xb625b000
mmap2(0xb625c000, 2592, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb625c000
close(4)                                = 0
gettimeofday({1389227393, 785326}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 794156}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 137, MSG_NOSIGNAL) = 137
open("/usr/local/lib/snort_dynamicpreprocessor//libsf_ssh_preproc.so", O_RDONLY|O_CLOEXEC) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0(\0\1\0\0\0T\7\0\0004\0\0\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=114620, ...}) = 0
mmap2(NULL, 45984, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0xb6239000
mprotect(0xb623c000, 32768, PROT_NONE)  = 0
mmap2(0xb6244000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x3000) = 0xb6244000
close(4)                                = 0
gettimeofday({1389227393, 799969}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 37, MSG_NOSIGNAL) = 37
gettimeofday({1389227393, 800943}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 128, MSG_NOSIGNAL) = 128
gettimeofday({1389227393, 814449}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227393, 815307}, NULL) = 0
open("/etc/localtime", O_RDONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory)
gettimeofday({1389227393, 816563}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 89, MSG_NOSIGNAL) = 89
gettimeofday({1389227393, 817515}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 89, MSG_NOSIGNAL) = 89
gettimeofday({1389227393, 818524}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 91, MSG_NOSIGNAL) = 91
gettimeofday({1389227393, 819461}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 89, MSG_NOSIGNAL) = 89
gettimeofday({1389227393, 820364}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 91, MSG_NOSIGNAL) = 91
brk(0x248b000)                          = 0x248b000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb61b8000
gettimeofday({1389227393, 825296}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 53, MSG_NOSIGNAL) = 53
gettimeofday({1389227393, 834153}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 53, MSG_NOSIGNAL) = 53
gettimeofday({1389227393, 835229}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 71, MSG_NOSIGNAL) = 71
gettimeofday({1389227393, 836272}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 53, MSG_NOSIGNAL) = 53
gettimeofday({1389227393, 845978}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227393, 852744}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227393, 857998}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 66, MSG_NOSIGNAL) = 66
gettimeofday({1389227393, 863167}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 58, MSG_NOSIGNAL) = 58
gettimeofday({1389227393, 868552}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227393, 875338}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 58, MSG_NOSIGNAL) = 58
gettimeofday({1389227393, 880423}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227393, 886188}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 55, MSG_NOSIGNAL) = 55
gettimeofday({1389227393, 891317}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227393, 896483}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227393, 901672}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227393, 906951}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 76, MSG_NOSIGNAL) = 76
gettimeofday({1389227393, 911962}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 84, MSG_NOSIGNAL) = 84
gettimeofday({1389227393, 918740}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227393, 924102}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227393, 929413}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227393, 934702}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 75, MSG_NOSIGNAL) = 75
gettimeofday({1389227393, 939839}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 66, MSG_NOSIGNAL) = 66
gettimeofday({1389227393, 945153}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
gettimeofday({1389227393, 950296}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 91, MSG_NOSIGNAL) = 91
gettimeofday({1389227393, 957140}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 66, MSG_NOSIGNAL) = 66
gettimeofday({1389227393, 962187}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227393, 967705}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 68, MSG_NOSIGNAL) = 68
gettimeofday({1389227393, 972835}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227393, 978202}, NULL) = 0
send(3, "<29>Jan  9 00:29:53 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
mmap2(NULL, 135168, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6197000
mmap2(NULL, 1052672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6096000
mmap2(NULL, 167776256, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xac095000
mmap2(NULL, 3149824, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xabd94000
mmap2(NULL, 3149824, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xaba93000
gettimeofday({1389227394, 104919}, NULL) = 0
mmap2(NULL, 2076672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xab898000
mmap2(NULL, 266240, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xab857000
munmap(0xab857000, 266240)              = 0
mmap2(NULL, 299008, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xab84f000
gettimeofday({1389227394, 133302}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 138757}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 139790}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227394, 144168}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 57, MSG_NOSIGNAL) = 57
gettimeofday({1389227394, 145178}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227394, 146134}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 90, MSG_NOSIGNAL) = 90
gettimeofday({1389227394, 154143}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 86, MSG_NOSIGNAL) = 86
gettimeofday({1389227394, 155225}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 45, MSG_NOSIGNAL) = 45
gettimeofday({1389227394, 156131}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227394, 157038}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227394, 157941}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227394, 158834}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 54, MSG_NOSIGNAL) = 54
gettimeofday({1389227394, 159756}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227394, 164106}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227394, 165055}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227394, 165973}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227394, 173923}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 174899}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227394, 177440}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227394, 185111}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227394, 191237}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227394, 196516}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 201583}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 207115}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 213967}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 219291}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 224664}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 229893}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 235311}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 240399}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 245821}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 251025}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227394, 279388}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 83, MSG_NOSIGNAL) = 83
brk(0x24c8000)                          = 0x24c8000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xab7ce000
mmap2(NULL, 1576960, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xab64d000
mmap2(NULL, 1576960, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xab4cc000
mmap2(NULL, 1576960, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xab34b000
gettimeofday({1389227394, 345678}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 354624}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 57, MSG_NOSIGNAL) = 57
brk(0x2519000)                          = 0x2519000
brk(0x2569000)                          = 0x2569000
open("/usr/local/etc/snort/unicode.map", O_RDONLY) = 4
brk(0x25b9000)                          = 0x25b9000
fstat64(4, {st_mode=S_IFREG|0644, st_size=53841, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(4, "# Windows Version: 5.00.2195\r\n# "..., 4096) = 4096
read(4, ":4c 013c:6c 013d:4c 013e:6c 0141"..., 4096) = 4096
read(4, "253c:2b 2550:2d 2552:2b 2553:2b "..., 4096) = 4096
close(4)                                = 0
munmap(0xb6f82000, 4096)                = 0
gettimeofday({1389227394, 390494}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 52, MSG_NOSIGNAL) = 52
gettimeofday({1389227394, 396073}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 50, MSG_NOSIGNAL) = 50
gettimeofday({1389227394, 397110}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 66, MSG_NOSIGNAL) = 66
gettimeofday({1389227394, 403805}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227394, 404843}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227394, 405799}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 97, MSG_NOSIGNAL) = 97
gettimeofday({1389227394, 406764}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227394, 407725}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 90, MSG_NOSIGNAL) = 90
gettimeofday({1389227394, 408629}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227394, 414112}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227394, 415057}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227394, 415961}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227394, 417840}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 424633}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 58, MSG_NOSIGNAL) = 58
gettimeofday({1389227394, 427155}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 432, MSG_NOSIGNAL) = 432
gettimeofday({1389227394, 428223}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 429137}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 434751}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227394, 436884}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 105, MSG_NOSIGNAL) = 105
gettimeofday({1389227394, 441940}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227394, 448763}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 68, MSG_NOSIGNAL) = 68
gettimeofday({1389227394, 455560}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 97, MSG_NOSIGNAL) = 97
gettimeofday({1389227394, 460752}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227394, 466006}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 68, MSG_NOSIGNAL) = 68
gettimeofday({1389227394, 471205}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 60, MSG_NOSIGNAL) = 60
gettimeofday({1389227394, 476562}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 481753}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227394, 487021}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 493776}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227394, 499010}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
gettimeofday({1389227394, 504226}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 66, MSG_NOSIGNAL) = 66
gettimeofday({1389227394, 509431}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 71, MSG_NOSIGNAL) = 71
gettimeofday({1389227394, 514769}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 95, MSG_NOSIGNAL) = 95
gettimeofday({1389227394, 519825}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 83, MSG_NOSIGNAL) = 83
gettimeofday({1389227394, 525211}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 123, MSG_NOSIGNAL) = 123
gettimeofday({1389227394, 531851}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227394, 537099}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 72, MSG_NOSIGNAL) = 72
gettimeofday({1389227394, 542271}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 60, MSG_NOSIGNAL) = 60
gettimeofday({1389227394, 547650}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227394, 552755}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 77, MSG_NOSIGNAL) = 77
gettimeofday({1389227394, 558089}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 563317}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227394, 568727}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 66, MSG_NOSIGNAL) = 66
gettimeofday({1389227394, 575739}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227394, 580991}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 586405}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227394, 591408}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 68, MSG_NOSIGNAL) = 68
gettimeofday({1389227394, 596864}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227394, 601972}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 73, MSG_NOSIGNAL) = 73
gettimeofday({1389227394, 607386}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 72, MSG_NOSIGNAL) = 72
gettimeofday({1389227394, 612644}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 71, MSG_NOSIGNAL) = 71
gettimeofday({1389227394, 619595}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227394, 624787}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 85, MSG_NOSIGNAL) = 85
gettimeofday({1389227394, 630088}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 109, MSG_NOSIGNAL) = 109
gettimeofday({1389227394, 635517}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 82, MSG_NOSIGNAL) = 82
gettimeofday({1389227394, 640813}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 54, MSG_NOSIGNAL) = 54
gettimeofday({1389227394, 646262}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 125, MSG_NOSIGNAL) = 125
gettimeofday({1389227394, 651433}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227394, 656692}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 68, MSG_NOSIGNAL) = 68
gettimeofday({1389227394, 663329}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227394, 668806}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 70, MSG_NOSIGNAL) = 70
brk(0x25ff000)                          = 0x25ff000
brk(0x264f000)                          = 0x264f000
brk(0x269f000)                          = 0x269f000
brk(0x26ef000)                          = 0x26ef000
gettimeofday({1389227394, 753804}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 50, MSG_NOSIGNAL) = 50
gettimeofday({1389227394, 754965}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 50, MSG_NOSIGNAL) = 50
gettimeofday({1389227394, 755929}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
gettimeofday({1389227394, 756906}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 81, MSG_NOSIGNAL) = 81
gettimeofday({1389227394, 757867}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 76, MSG_NOSIGNAL) = 76
brk(0x2710000)                          = 0x2710000
gettimeofday({1389227394, 766037}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 51, MSG_NOSIGNAL) = 51
gettimeofday({1389227394, 768317}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 49, MSG_NOSIGNAL) = 49
gettimeofday({1389227394, 774162}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 66, MSG_NOSIGNAL) = 66
gettimeofday({1389227394, 775160}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 53, MSG_NOSIGNAL) = 53
gettimeofday({1389227394, 776120}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 60, MSG_NOSIGNAL) = 60
gettimeofday({1389227394, 783806}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 48, MSG_NOSIGNAL) = 48
gettimeofday({1389227394, 784859}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 58, MSG_NOSIGNAL) = 58
gettimeofday({1389227394, 793816}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227394, 795002}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227394, 796652}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 85, MSG_NOSIGNAL) = 85
gettimeofday({1389227394, 801781}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 72, MSG_NOSIGNAL) = 72
gettimeofday({1389227394, 807158}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 58, MSG_NOSIGNAL) = 58
gettimeofday({1389227394, 812380}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 81, MSG_NOSIGNAL) = 81
gettimeofday({1389227394, 817578}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227394, 823001}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 85, MSG_NOSIGNAL) = 85
gettimeofday({1389227394, 828527}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227394, 843804}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 45, MSG_NOSIGNAL) = 45
gettimeofday({1389227394, 845950}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 851120}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227394, 856601}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 338, MSG_NOSIGNAL) = 338
gettimeofday({1389227394, 861825}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 52, MSG_NOSIGNAL) = 52
gettimeofday({1389227394, 867305}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 56, MSG_NOSIGNAL) = 56
gettimeofday({1389227394, 872432}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227394, 877881}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227394, 884796}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 71, MSG_NOSIGNAL) = 71
gettimeofday({1389227394, 889987}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 86, MSG_NOSIGNAL) = 86
gettimeofday({1389227394, 895420}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 85, MSG_NOSIGNAL) = 85
gettimeofday({1389227394, 900722}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 85, MSG_NOSIGNAL) = 85
gettimeofday({1389227394, 906085}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 86, MSG_NOSIGNAL) = 86
gettimeofday({1389227394, 911327}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 85, MSG_NOSIGNAL) = 85
gettimeofday({1389227394, 916722}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 89, MSG_NOSIGNAL) = 89
gettimeofday({1389227394, 921853}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 89, MSG_NOSIGNAL) = 89
gettimeofday({1389227394, 928804}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 89, MSG_NOSIGNAL) = 89
gettimeofday({1389227394, 934295}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 97, MSG_NOSIGNAL) = 97
gettimeofday({1389227394, 939502}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 49, MSG_NOSIGNAL) = 49
gettimeofday({1389227394, 944826}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227394, 950250}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 66, MSG_NOSIGNAL) = 66
gettimeofday({1389227394, 955578}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 60, MSG_NOSIGNAL) = 60
gettimeofday({1389227394, 960699}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227394, 967628}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 60, MSG_NOSIGNAL) = 60
gettimeofday({1389227394, 972825}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 66, MSG_NOSIGNAL) = 66
gettimeofday({1389227394, 978250}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 56, MSG_NOSIGNAL) = 56
gettimeofday({1389227394, 983334}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 57, MSG_NOSIGNAL) = 57
gettimeofday({1389227394, 988794}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227394, 994222}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227394, 999355}, NULL) = 0
send(3, "<29>Jan  9 00:29:54 snort[774]: "..., 71, MSG_NOSIGNAL) = 71
gettimeofday({1389227395, 4742}, NULL)  = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227395, 11494}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227395, 16842}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 75, MSG_NOSIGNAL) = 75
gettimeofday({1389227395, 22049}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 84, MSG_NOSIGNAL) = 84
gettimeofday({1389227395, 27437}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 92, MSG_NOSIGNAL) = 92
gettimeofday({1389227395, 32563}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227395, 37791}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227395, 42948}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227395, 48397}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227395, 55282}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
brk(0x2731000)                          = 0x2731000
gettimeofday({1389227395, 78232}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 45, MSG_NOSIGNAL) = 45
gettimeofday({1389227395, 79273}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227395, 80240}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
gettimeofday({1389227395, 83796}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 62, MSG_NOSIGNAL) = 62
gettimeofday({1389227395, 89014}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 82, MSG_NOSIGNAL) = 82
gettimeofday({1389227395, 94400}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227395, 99686}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227395, 106558}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227395, 111697}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 73, MSG_NOSIGNAL) = 73
gettimeofday({1389227395, 117117}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
gettimeofday({1389227395, 122293}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 76, MSG_NOSIGNAL) = 76
gettimeofday({1389227395, 127657}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227395, 132808}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 43, MSG_NOSIGNAL) = 43
gettimeofday({1389227395, 138251}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 35, MSG_NOSIGNAL) = 35
gettimeofday({1389227395, 146217}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
brk(0x2761000)                          = 0x2761000
brk(0x2783000)                          = 0x2783000
brk(0x27a4000)                          = 0x27a4000
gettimeofday({1389227395, 168008}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227395, 169031}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 55, MSG_NOSIGNAL) = 55
gettimeofday({1389227395, 170114}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227395, 175289}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 54, MSG_NOSIGNAL) = 54
gettimeofday({1389227395, 180538}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 48, MSG_NOSIGNAL) = 48
gettimeofday({1389227395, 185921}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
brk(0x27c9000)                          = 0x27c9000
gettimeofday({1389227395, 253806}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227395, 254844}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 50, MSG_NOSIGNAL) = 50
gettimeofday({1389227395, 255803}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 55, MSG_NOSIGNAL) = 55
gettimeofday({1389227395, 266014}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 52, MSG_NOSIGNAL) = 52
gettimeofday({1389227395, 268236}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 48, MSG_NOSIGNAL) = 48
gettimeofday({1389227395, 270420}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 48, MSG_NOSIGNAL) = 48
gettimeofday({1389227395, 283817}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 65, MSG_NOSIGNAL) = 65
gettimeofday({1389227395, 286068}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
gettimeofday({1389227395, 288133}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 59, MSG_NOSIGNAL) = 59
gettimeofday({1389227395, 290428}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 48, MSG_NOSIGNAL) = 48
gettimeofday({1389227395, 293314}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 55, MSG_NOSIGNAL) = 55
gettimeofday({1389227395, 306522}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 55, MSG_NOSIGNAL) = 55
gettimeofday({1389227395, 309282}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 72, MSG_NOSIGNAL) = 72
gettimeofday({1389227395, 311466}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
gettimeofday({1389227395, 314239}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 70, MSG_NOSIGNAL) = 70
gettimeofday({1389227395, 319301}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 77, MSG_NOSIGNAL) = 77
gettimeofday({1389227395, 324948}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 45, MSG_NOSIGNAL) = 45
gettimeofday({1389227395, 331812}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 80, MSG_NOSIGNAL) = 80
gettimeofday({1389227395, 337308}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227395, 342554}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227395, 348035}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 42, MSG_NOSIGNAL) = 42
gettimeofday({1389227395, 353153}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 35, MSG_NOSIGNAL) = 35
gettimeofday({1389227395, 359680}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227395, 366487}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 46, MSG_NOSIGNAL) = 46
gettimeofday({1389227395, 373235}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227395, 378694}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 43, MSG_NOSIGNAL) = 43
gettimeofday({1389227395, 384103}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227395, 389536}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227395, 394934}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227395, 400133}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227395, 405421}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227395, 410648}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 78, MSG_NOSIGNAL) = 78
gettimeofday({1389227395, 418469}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 51, MSG_NOSIGNAL) = 51
gettimeofday({1389227395, 423790}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
gettimeofday({1389227395, 430826}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 69, MSG_NOSIGNAL) = 69
gettimeofday({1389227395, 436308}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 63, MSG_NOSIGNAL) = 63
gettimeofday({1389227395, 441436}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 60, MSG_NOSIGNAL) = 60
brk(0x27ea000)                          = 0x27ea000
gettimeofday({1389227395, 449506}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 48, MSG_NOSIGNAL) = 48
gettimeofday({1389227395, 454980}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 43, MSG_NOSIGNAL) = 43
gettimeofday({1389227395, 460451}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 36, MSG_NOSIGNAL) = 36
gettimeofday({1389227395, 468488}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227395, 474145}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 46, MSG_NOSIGNAL) = 46
gettimeofday({1389227395, 479334}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 51, MSG_NOSIGNAL) = 51
gettimeofday({1389227395, 484926}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 67, MSG_NOSIGNAL) = 67
gettimeofday({1389227395, 490119}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 43, MSG_NOSIGNAL) = 43
gettimeofday({1389227395, 495847}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 38, MSG_NOSIGNAL) = 38
gettimeofday({1389227395, 502014}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227395, 509827}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227395, 516797}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 84, MSG_NOSIGNAL) = 84
gettimeofday({1389227395, 522081}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 60, MSG_NOSIGNAL) = 60
open("/usr/local/etc/snort/snort.conf", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=19904, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(4, "#-------------------------------"..., 4096) = 4096
read(4, "reprocessor set these\n# Currentl"..., 4096) = 4096
read(4, " 8080 8085 8088 8090 8118 8123 8"..., 4096) = 4096
read(4, "TYPE USER } \\\n    chk_str_fmt { "..., 4096) = 4096
read(4, "sensitive_data\npreprocessor sens"..., 4096) = 3520
stat64("classification.config", 0xbeda79b8) = -1 ENOENT (No such file or directory)
open("/usr/local/etc/snort/classification.config", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=3854, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# $Id: classification.config,v 1"..., 4096) = 3854
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("reference.config", 0xbeda79b8)  = -1 ENOENT (No such file or directory)
open("/usr/local/etc/snort/reference.config", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=746, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# $Id: reference.config,v 1.3 20"..., 4096) = 746
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/local.rules", {st_mode=S_IFREG|0644, st_size=1579, ...}) = 0
open("/usr/local/etc/snort/rules/local.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1579, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1579
brk(0x280b000)                          = 0x280b000
read(5, "", 4096)                       = 0
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/attack-responses.rules", {st_mode=S_IFREG|0644, st_size=1061, ...}) = 0
open("/usr/local/etc/snort/rules/attack-responses.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1061, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1061
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/backdoor.rules", {st_mode=S_IFREG|0644, st_size=1037, ...}) = 0
open("/usr/local/etc/snort/rules/backdoor.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1037, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1037
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/botnet-cnc.rules", {st_mode=S_IFREG|0644, st_size=1043, ...}) = 0
open("/usr/local/etc/snort/rules/botnet-cnc.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1043, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1043
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/spyware-put.rules", {st_mode=S_IFREG|0644, st_size=1046, ...}) = 0
open("/usr/local/etc/snort/rules/spyware-put.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1046, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1046
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/virus.rules", {st_mode=S_IFREG|0644, st_size=1028, ...}) = 0
open("/usr/local/etc/snort/rules/virus.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1028, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1028
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("/usr/local/etc/snort/rules/web-client.rules", {st_mode=S_IFREG|0644, st_size=1043, ...}) = 0
open("/usr/local/etc/snort/rules/web-client.rules", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=1043, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Copyright 2001-2013 Sourcefire"..., 4096) = 1043
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
stat64("threshold.conf", 0xbeda79b8)    = -1 ENOENT (No such file or directory)
open("/usr/local/etc/snort/threshold.conf", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=2556, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f81000
read(5, "# Configure Thresholding and Sup"..., 4096) = 2556
read(5, "", 4096)                       = 0
close(5)                                = 0
munmap(0xb6f81000, 4096)                = 0
read(4, "", 4096)                       = 0
close(4)                                = 0
munmap(0xb6f82000, 4096)                = 0
gettimeofday({1389227395, 637899}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 51, MSG_NOSIGNAL) = 51
gettimeofday({1389227395, 644092}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 54, MSG_NOSIGNAL) = 54
gettimeofday({1389227395, 645063}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 52, MSG_NOSIGNAL) = 52
gettimeofday({1389227395, 645974}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 57, MSG_NOSIGNAL) = 57
gettimeofday({1389227395, 653981}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 76, MSG_NOSIGNAL) = 76
gettimeofday({1389227395, 654942}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 48, MSG_NOSIGNAL) = 48
gettimeofday({1389227395, 655848}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 84, MSG_NOSIGNAL) = 84
gettimeofday({1389227395, 656747}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
brk(0x2830000)                          = 0x2830000
brk(0x2857000)                          = 0x2857000
brk(0x287e000)                          = 0x287e000
brk(0x28a5000)                          = 0x28a5000
gettimeofday({1389227395, 801169}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 110, MSG_NOSIGNAL) = 110
gettimeofday({1389227395, 808282}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227395, 809320}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227395, 810446}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227395, 823530}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227395, 824735}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227395, 825826}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 74, MSG_NOSIGNAL) = 74
gettimeofday({1389227395, 826944}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 110, MSG_NOSIGNAL) = 110
gettimeofday({1389227395, 827897}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227395, 828813}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 829723}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227395, 830626}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 831525}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 39, MSG_NOSIGNAL) = 39
gettimeofday({1389227395, 832423}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 833326}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227395, 834479}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 838901}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227395, 846288}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 852492}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 39, MSG_NOSIGNAL) = 39
gettimeofday({1389227395, 859459}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 864797}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227395, 870095}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 875599}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 61, MSG_NOSIGNAL) = 61
gettimeofday({1389227395, 880853}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 886444}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 891763}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 39, MSG_NOSIGNAL) = 39
gettimeofday({1389227395, 897222}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 904225}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 39, MSG_NOSIGNAL) = 39
gettimeofday({1389227395, 909660}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 112, MSG_NOSIGNAL) = 112
gettimeofday({1389227395, 915171}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 115, MSG_NOSIGNAL) = 115
gettimeofday({1389227395, 920661}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 71, MSG_NOSIGNAL) = 71
brk(0x28c9000)                          = 0x28c9000
gettimeofday({1389227395, 933815}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 83, MSG_NOSIGNAL) = 83
gettimeofday({1389227395, 935801}, NULL) = 0
send(3, "<29>Jan  9 00:29:55 snort[774]: "..., 79, MSG_NOSIGNAL) = 79
mmap2(NULL, 56627200, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa7d4a000
mmap2(NULL, 4722688, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa78c9000
mmap2(NULL, 4722688, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa7448000
mmap2(NULL, 839680, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa737b000
brk(0x28f0000)                          = 0x28f0000
mmap2(NULL, 839680, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa72ae000
mmap2(NULL, 790528, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa71ed000
mmap2(NULL, 835584, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa7121000
brk(0x2930000)                          = 0x2930000
umask(077)                              = 022
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa70a0000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa701f000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa6f9e000
mmap2(NULL, 528384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xa6f1d000
gettimeofday({1389227396, 206387}, NULL) = 0
send(3, "<29>Jan  9 00:29:56 snort[774]: "..., 33, MSG_NOSIGNAL) = 33
gettimeofday({1389227396, 211964}, NULL) = 0
send(3, "<29>Jan  9 00:29:56 snort[774]: "..., 71, MSG_NOSIGNAL) = 71
gettimeofday({1389227396, 213150}, NULL) = 0
send(3, "<29>Jan  9 00:29:56 snort[774]: "..., 85, MSG_NOSIGNAL) = 85
gettimeofday({1389227396, 218619}, NULL) = 0
send(3, "<29>Jan  9 00:29:56 snort[774]: "..., 80, MSG_NOSIGNAL) = 80
socket(PF_NETLINK, SOCK_RAW, 0)         = 4
bind(4, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(4, {sa_family=AF_NETLINK, pid=774, groups=00000000}, [12]) = 0
gettimeofday({1389227396, 221166}, NULL) = 0
sendto(4, "\24\0\0\0\22\0\1\3\204\355\315R\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\2\0\0\20\0\2\0\204\355\315R\6\3\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 2928
recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\204\355\315R\6\3\0\0\0\0\0\0", 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
sendto(4, "\24\0\0\0\26\0\1\3\205\355\315R\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"D\0\0\0\24\0\2\0\205\355\315R\6\3\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 148
recvmsg(4, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\205\355\315R\6\3\0\0\0\0\0\0", 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(4)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 4
ioctl(4, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(4, SIOCGIFHWADDR, {ifr_name="lo", ifr_hwaddr=00:00:00:00:00:00}) = 0
ioctl(4, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
bind(4, {sa_family=AF_PACKET, proto=0x03, if1, pkttype=PACKET_HOST, addr(0)={0, }, 20) = 0
getsockopt(4, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
setsockopt(4, SOL_PACKET, PACKET_AUXDATA, [1], 4) = 0
getsockopt(4, SOL_PACKET, PACKET_HDRLEN, [36], [4]) = 0
setsockopt(4, SOL_PACKET, PACKET_VERSION, [2], 4) = 0
setsockopt(4, SOL_PACKET, PACKET_RESERVE, [4], 4) = 0
setsockopt(4, SOL_PACKET, PACKET_RX_RING, "\0\0\2\0\20\0\0\0\0\0\2\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 28) = 0
mmap2(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 4, 0) = 0xa6d1d000
setsockopt(4, SOL_PACKET, PACKET_RX_RING, {block_size=0, block_nr=0, frame_size=0, frame_nr=0}, 16) = -1 EINVAL (Invalid argument)
munmap(0xa6d1d000, 2097152)             = 0
close(4)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 4
ioctl(4, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(4, SIOCGIFHWADDR, {ifr_name="eth0", ifr_hwaddr=b8:27:eb:98:07:cb}) = 0
ioctl(4, SIOCGIFINDEX, {ifr_name="eth0", ifr_index=4}) = 0
bind(4, {sa_family=AF_PACKET, proto=0x03, if4, pkttype=PACKET_HOST, addr(0)={0, }, 20) = 0
getsockopt(4, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
setsockopt(4, SOL_PACKET, PACKET_AUXDATA, [1], 4) = 0
getsockopt(4, SOL_PACKET, PACKET_HDRLEN, [36], [4]) = 0
setsockopt(4, SOL_PACKET, PACKET_VERSION, [2], 4) = 0
setsockopt(4, SOL_PACKET, PACKET_RESERVE, [4], 4) = 0
setsockopt(4, SOL_PACKET, PACKET_RX_RING, "\0\0\2\0\20\0\0\0\0\0\2\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 28) = 0
mmap2(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 4, 0) = 0xa6d1d000
setsockopt(4, SOL_PACKET, PACKET_RX_RING, {block_size=0, block_nr=0, frame_size=0, frame_nr=0}, 16) = -1 EINVAL (Invalid argument)
munmap(0xa6d1d000, 2097152)             = 0
close(4)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 4
ioctl(4, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(4, SIOCGIFHWADDR, {ifr_name="eth1", ifr_hwaddr=8c:ae:4c:fe:6b:a3}) = 0
ioctl(4, SIOCGIFINDEX, {ifr_name="eth1", ifr_index=5}) = 0
bind(4, {sa_family=AF_PACKET, proto=0x03, if5, pkttype=PACKET_HOST, addr(0)={0, }, 20) = 0
getsockopt(4, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
setsockopt(4, SOL_PACKET, PACKET_AUXDATA, [1], 4) = 0
getsockopt(4, SOL_PACKET, PACKET_HDRLEN, [36], [4]) = 0
setsockopt(4, SOL_PACKET, PACKET_VERSION, [2], 4) = 0
setsockopt(4, SOL_PACKET, PACKET_RESERVE, [4], 4) = 0
setsockopt(4, SOL_PACKET, PACKET_RX_RING, "\0\0\2\0\20\0\0\0\0\0\2\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 28) = 0
mmap2(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 4, 0) = 0xa6d1d000
setsockopt(4, SOL_PACKET, PACKET_RX_RING, {block_size=0, block_nr=0, frame_size=0, frame_nr=0}, 16) = -1 EINVAL (Invalid argument)
munmap(0xa6d1d000, 2097152)             = 0
close(4)                                = 0
openat(AT_FDCWD, "/sys/class/net", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 4
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 5
getdents64(4, /* 7 entries */, 32768)   = 168
lstat64("/sys/class/net/eth1/ifindex", {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
ioctl(5, SIOCGIFFLAGS, {ifr_name="eth1", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_RUNNING|IFF_MULTICAST}) = 0
lstat64("/sys/class/net/eth0/ifindex", {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
ioctl(5, SIOCGIFFLAGS, {ifr_name="eth0", ifr_flags=IFF_UP|IFF_BROADCAST|IFF_RUNNING|IFF_MULTICAST}) = 0
lstat64("/sys/class/net/ifb1/ifindex", {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
ioctl(5, SIOCGIFFLAGS, {ifr_name="ifb1", ifr_flags=IFF_BROADCAST|IFF_NOARP}) = 0
lstat64("/sys/class/net/ifb0/ifindex", {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
ioctl(5, SIOCGIFFLAGS, {ifr_name="ifb0", ifr_flags=IFF_BROADCAST|IFF_NOARP}) = 0
lstat64("/sys/class/net/lo/ifindex", {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
ioctl(5, SIOCGIFFLAGS, {ifr_name="lo", ifr_flags=IFF_UP|IFF_LOOPBACK|IFF_RUNNING}) = 0
getdents64(4, /* 0 entries */, 32768)   = 0
close(5)                                = 0
close(4)                                = 0
socket(PF_PACKET, SOCK_DGRAM, 768)      = 4
ioctl(4, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
setsockopt(4, SOL_PACKET, PACKET_AUXDATA, [1], 4) = 0
getsockopt(4, SOL_PACKET, PACKET_HDRLEN, [36], [4]) = 0
setsockopt(4, SOL_PACKET, PACKET_VERSION, [2], 4) = 0
setsockopt(4, SOL_PACKET, PACKET_RESERVE, [4], 4) = 0
setsockopt(4, SOL_PACKET, PACKET_RX_RING, "\0\0\2\0\20\0\0\0\0\0\2\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 28) = 0
mmap2(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 4, 0) = 0xa6d1d000
setsockopt(4, SOL_PACKET, PACKET_RX_RING, {block_size=0, block_nr=0, frame_size=0, frame_nr=0}, 16) = -1 EINVAL (Invalid argument)
munmap(0xa6d1d000, 2097152)             = 0
close(4)                                = 0
gettimeofday({1389227396, 290168}, NULL) = 0
openat(AT_FDCWD, "/dev/bus/usb", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 4
getdents(4, /* 3 entries */, 32768)     = 48
close(4)                                = 0
clock_gettime(CLOCK_MONOTONIC, {6904, 148884116}) = 0
uname({sys="Linux", node="alarmpi", ...}) = 0
uname({sys="Linux", node="alarmpi", ...}) = 0
uname({sys="Linux", node="alarmpi", ...}) = 0
uname({sys="Linux", node="alarmpi", ...}) = 0
stat64("/sys/bus/usb/devices", {st_mode=S_IFDIR|0755, st_size=0, ...}) = 0
open("/etc/udev/udev.conf", O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=44, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(4, "# see udev(7) for details\n\n#udev"..., 4096) = 44
read(4, "", 4096)                       = 0
close(4)                                = 0
munmap(0xb6f82000, 4096)                = 0
socket(PF_NETLINK, SOCK_RAW|SOCK_CLOEXEC|SOCK_NONBLOCK, 15) = 4
setsockopt(4, SOL_SOCKET, SO_ATTACH_FILTER, "\10\0\0\0`g\332\276", 8) = 0
bind(4, {sa_family=AF_NETLINK, pid=0, groups=00000002}, 12) = 0
getsockname(4, {sa_family=AF_NETLINK, pid=774, groups=00000002}, [12]) = 0
setsockopt(4, SOL_SOCKET, SO_PASSCRED, [1], 4) = 0
fcntl64(4, F_GETFL)                     = 0x802 (flags O_RDWR|O_NONBLOCK)
fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
pipe([5, 6])                            = 0
fcntl64(6, F_GETFL)                     = 0x1 (flags O_WRONLY)
fcntl64(6, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
mmap2(NULL, 8388608, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0xa671d000
mprotect(0xa671d000, 4096, PROT_NONE)   = 0
clone(child_stack=0xa6f1bf78, flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, parent_tidptr=0xa6f1c4a8, tls=0xa6f1c900, child_tidptr=0xa6f1c4a8) = 775
stat64("/sys/subsystem", 0xbeda77a8)    = -1 ENOENT (No such file or directory)
openat(AT_FDCWD, "/sys/bus", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 7
getdents64(7, /* 19 entries */, 32768)  = 528
openat(AT_FDCWD, "/sys/bus/usb/devices", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 8
getdents64(8, /* 10 entries */, 32768)  = 288
readlink("/sys/bus/usb/devices/1-1", "../../../devices/platform/bcm270"..., 1024) = 46
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
readlink("/sys/bus/usb/devices/usb1", "../../../devices/platform/bcm270"..., 1024) = 42
stat64("/sys/devices/platform/bcm2708_usb/usb1/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
readlink("/sys/bus/usb/devices/1-1.1:1.0", "../../../devices/platform/bcm270"..., 1024) = 62
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.1/1-1.1:1.0/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
readlink("/sys/bus/usb/devices/1-1.3:1.0", "../../../devices/platform/bcm270"..., 1024) = 62
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.3/1-1.3:1.0/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
readlink("/sys/bus/usb/devices/1-1.1", "../../../devices/platform/bcm270"..., 1024) = 52
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.1/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
readlink("/sys/bus/usb/devices/1-1.3", "../../../devices/platform/bcm270"..., 1024) = 52
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.3/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
readlink("/sys/bus/usb/devices/1-0:1.0", "../../../devices/platform/bcm270"..., 1024) = 50
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-0:1.0/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
readlink("/sys/bus/usb/devices/1-1:1.0", "../../../devices/platform/bcm270"..., 1024) = 54
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1:1.0/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
getdents64(8, /* 0 entries */, 32768)   = 0
close(8)                                = 0
getdents64(7, /* 0 entries */, 32768)   = 0
close(7)                                = 0
openat(AT_FDCWD, "/sys/class", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 7
getdents64(7, /* 40 entries */, 32768)  = 1208
getdents64(7, /* 0 entries */, 32768)   = 0
close(7)                                = 0
readlink("/sys/devices/platform/bcm2708_usb/usb1", 0xbeda6b64, 1024) = -1 EINVAL (Invalid argument)
stat64("/sys/devices/platform/bcm2708_usb/usb1/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
open("/sys/devices/platform/bcm2708_usb/usb1/uevent", O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 7
fstat64(7, {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "MAJOR=189\nMINOR=0\nDEVNAME=bus/us"..., 4096) = 124
read(7, "", 4096)                       = 0
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/usb1/busnum", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "1\n", 4096)                    = 2
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/usb1/devnum", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "1\n", 4096)                    = 2
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/usb1/speed", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "480\n", 4096)                  = 4
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/usb1/descriptors", O_RDONLY) = 7
read(7, "\22\1\0\2\t\0\1 at k\35\2\0\20\3\3\2\1\1\t\2\31\0\1\1\0\340\0\t\4\0\0\1"..., 1024) = 43
close(7)                                = 0
readlink("/sys/devices/platform/bcm2708_usb/usb1/1-0:1.0", 0xbeda6b64, 1024) = -1 EINVAL (Invalid argument)
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-0:1.0/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
open("/sys/devices/platform/bcm2708_usb/usb1/1-0:1.0/uevent", O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 7
fstat64(7, {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "DEVTYPE=usb_interface\nDRIVER=hub"..., 4096) = 138
read(7, "", 4096)                       = 0
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
readlink("/sys/devices/platform/bcm2708_usb/usb1/1-1", 0xbeda6b64, 1024) = -1 EINVAL (Invalid argument)
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
open("/sys/devices/platform/bcm2708_usb/usb1/1-1/uevent", O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 7
fstat64(7, {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "MAJOR=189\nMINOR=1\nDEVNAME=bus/us"..., 4096) = 126
read(7, "", 4096)                       = 0
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1/busnum", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "1\n", 4096)                    = 2
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1/devnum", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "2\n", 4096)                    = 2
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1/speed", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "480\n", 4096)                  = 4
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1/descriptors", O_RDONLY) = 7
read(7, "\22\1\0\2\t\0\2@$\4\22\225\0\2\0\0\0\1\t\2)\0\1\1\0\340\1\t\4\0\0\1"..., 1024) = 59
close(7)                                = 0
readlink("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.1", 0xbeda6b64, 1024) = -1 EINVAL (Invalid argument)
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.1/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
open("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.1/uevent", O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 7
fstat64(7, {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "MAJOR=189\nMINOR=2\nDEVNAME=bus/us"..., 4096) = 128
read(7, "", 4096)                       = 0
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1.1/busnum", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "1\n", 4096)                    = 2
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1.1/devnum", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "3\n", 4096)                    = 2
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1.1/speed", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "480\n", 4096)                  = 4
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1.1/descriptors", O_RDONLY) = 7
read(7, "\22\1\0\2\377\0\1@$\4\0\354\0\2\0\0\0\1\t\2'\0\1\1\0\340\1\t\4\0\0\3"..., 1024) = 57
close(7)                                = 0
readlink("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.1/1-1.1:1.0", 0xbeda6b64, 1024) = -1 EINVAL (Invalid argument)
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.1/1-1.1:1.0/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
open("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.1/1-1.1:1.0/uevent", O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 7
fstat64(7, {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "DEVTYPE=usb_interface\nDRIVER=sms"..., 4096) = 151
read(7, "", 4096)                       = 0
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
readlink("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.3", 0xbeda6b64, 1024) = -1 EINVAL (Invalid argument)
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.3/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
open("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.3/uevent", O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 7
fstat64(7, {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "MAJOR=189\nMINOR=3\nDEVNAME=bus/us"..., 4096) = 128
read(7, "", 4096)                       = 0
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1.3/busnum", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "1\n", 4096)                    = 2
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1.3/devnum", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "4\n", 4096)                    = 2
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1.3/speed", O_RDONLY) = 7
fstat64(7, {st_mode=S_IFREG|0444, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "480\n", 4096)                  = 4
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
open("/sys/bus/usb/devices/1-1.3/descriptors", O_RDONLY) = 7
read(7, "\22\1\0\2\377\377\0@\225\v w\1\0\1\2\3\1\t\2'\0\1\1\4\240}\t\4\0\0\3"..., 1024) = 57
close(7)                                = 0
readlink("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.3/1-1.3:1.0", 0xbeda6b64, 1024) = -1 EINVAL (Invalid argument)
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.3/1-1.3:1.0/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
open("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1.3/1-1.3:1.0/uevent", O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 7
fstat64(7, {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "DEVTYPE=usb_interface\nDRIVER=asi"..., 4096) = 147
read(7, "", 4096)                       = 0
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
readlink("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1:1.0", 0xbeda6b64, 1024) = -1 EINVAL (Invalid argument)
stat64("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1:1.0/uevent", {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
open("/sys/devices/platform/bcm2708_usb/usb1/1-1/1-1:1.0/uevent", O_RDONLY|O_LARGEFILE|O_CLOEXEC) = 7
fstat64(7, {st_mode=S_IFREG|0644, st_size=4096, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
read(7, "DEVTYPE=usb_interface\nDRIVER=hub"..., 4096) = 140
read(7, "", 4096)                       = 0
close(7)                                = 0
munmap(0xb6f82000, 4096)                = 0
pipe([7, 8])                            = 0
fcntl64(8, F_GETFL)                     = 0x1 (flags O_WRONLY)
fcntl64(8, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
pipe([9, 10])                           = 0
fcntl64(10, F_GETFL)                    = 0x1 (flags O_WRONLY)
fcntl64(10, F_SETFL, O_WRONLY|O_NONBLOCK) = 0
timerfd(1, 0x800 /* CLOCK_??? */, 0xb6af3258 /* TFD_??? */, {it_interval={3851665408, 3814457347}, it_value={452984308, 3851272192}}) = 11
recvmsg(4, 0xbeda57f8, 0)               = -1 EAGAIN (Resource temporarily unavailable)
close(7)                                = 0
close(8)                                = 0
close(9)                                = 0
close(10)                               = 0
close(11)                               = 0
write(6, "\1", 1)                       = 1
close(4)                                = 0
close(5)                                = 0
close(6)                                = 0
openat(AT_FDCWD, "/sys/bus/usb/devices", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 4
getdents64(4, /* 10 entries */, 32768)  = 288
open("/dev/usbmon1", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory)
open("/sys/kernel/debug/usb/usbmon/1t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory)
open("/sys/kernel/debug/usbmon/1t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory)
getdents64(4, /* 0 entries */, 32768)   = 0
close(4)                                = 0
socket(PF_NETLINK, SOCK_RAW, 12)        = 4
close(4)                                = 0
socket(PF_NETLINK, SOCK_RAW, 12)        = 4
gettimeofday({1389227396, 406925}, NULL) = 0
sendto(4, "\34\0\0\0\1\4\5\0\205\355\315R\0\0\0\0\2\0\0\0\5\0\1\0\4\0\0\0", 28, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(4, "$\0\0\0\2\0\0\0\205\355\315R\6\3\0\0\0\0\0\0\34\0\0\0\1\4\5\0\205\355\315R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(4, "\34\0\0\0\1\4\5\0\206\355\315R\0\0\0\0\2\0\0\0\5\0\1\0\3\4\5\0", 28, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(4, "$\0\0\0\2\0\0\0\206\355\315R\6\3\0\0\0\0\0\0\34\0\0\0\1\4\5\0\206\355\315R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(4, "\34\0\0\0\1\4\5\0\207\355\315R\0\0\0\0\0\0\0\0\5\0\1\0\1\4\5\0", 28, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(4, "$\0\0\0\2\0\0\0\207\355\315R\6\3\0\0\0\0\0\0\34\0\0\0\1\4\5\0\207\355\315R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(4, " \0\0\0\1\4\5\0\210\355\315R\0\0\0\0\0\0\0\0\n\0\2\0\0\0\0D\2\334\315R", 32, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 32
recvfrom(4, "$\0\0\0\2\0\0\0\210\355\315R\6\3\0\0\0\0\0\0 \0\0\0\1\4\5\0\210\355\315R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
close(4)                                = 0
socket(PF_NETLINK, SOCK_RAW, 12)        = 4
sendto(4, "\34\0\0\0\2\3\5\0\211\355\315R\0\0\0\0\0\0\0\0\10\0\1\0\4\334\0\2", 28, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(4, "$\0\0\0\2\0\0\0\211\355\315R\6\3\0\0\0\0\0\0\34\0\0\0\2\3\5\0\211\355\315R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(4, "\34\0\0\0\2\3\5\0\212\355\315R\0\0\0\0\0\0\0\0\10\0\1\0\3\334\0\2", 28, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(4, "$\0\0\0\2\0\0\0\212\355\315R\6\3\0\0\0\0\0\0\34\0\0\0\2\3\5\0\212\355\315R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(4, "\34\0\0\0\2\3\5\0\213\355\315R\0\0\0\0\0\0\0\0\10\0\1\0\1\334\0\0", 28, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(4, "$\0\0\0\2\0\0\0\213\355\315R\6\3\0\0\0\0\0\0\34\0\0\0\2\3\5\0\213\355\315R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(4, " \0\0\0\2\3\5\0\214\355\315R\0\0\0\0\0\0\0\0\t\0\2\0\0\0\0D\2\355\315R", 32, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 32
recvfrom(4, "$\0\0\0\2\0\0\0\214\355\315R\6\3\0\0\0\0\0\0 \0\0\0\2\3\5\0\214\355\315R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
close(4)                                = 0
getresuid32([0], [0], [0])              = 0
getresgid32([0], [0], [0])              = 0
socket(PF_LOCAL, SOCK_STREAM|SOCK_CLOEXEC, 0) = 4
connect(4, {sa_family=AF_LOCAL, sun_path="/run/dbus/system_bus_socket"}, 29) = 0
fcntl64(4, F_GETFL)                     = 0x2 (flags O_RDWR)
fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
geteuid32()                             = 0
getsockname(4, {sa_family=AF_LOCAL, NULL}, [2]) = 0
poll([{fd=4, events=POLLOUT}], 1, 0)    = 1 ([{fd=4, revents=POLLOUT}])
send(4, "\0", 1, MSG_NOSIGNAL)          = 1
send(4, "AUTH EXTERNAL 30\r\n", 18, MSG_NOSIGNAL) = 18
poll([{fd=4, events=POLLIN}], 1, -1)    = 1 ([{fd=4, revents=POLLIN}])
read(4, "OK 704a887516c3a165df4e861c00000"..., 2048) = 37
poll([{fd=4, events=POLLOUT}], 1, -1)   = 1 ([{fd=4, revents=POLLOUT}])
send(4, "NEGOTIATE_UNIX_FD\r\n", 19, MSG_NOSIGNAL) = 19
poll([{fd=4, events=POLLIN}], 1, -1)    = 1 ([{fd=4, revents=POLLIN}])
read(4, "AGREE_UNIX_FD\r\n", 2048)      = 15
poll([{fd=4, events=POLLOUT}], 1, -1)   = 1 ([{fd=4, revents=POLLOUT}])
send(4, "BEGIN\r\n", 7, MSG_NOSIGNAL)   = 7
poll([{fd=4, events=POLLIN|POLLOUT}], 1, -1) = 1 ([{fd=4, revents=POLLOUT}])
sendmsg(4, {msg_name(0)=NULL, msg_iov(2)=[{"l\1\0\1\0\0\0\0\1\0\0\0n\0\0\0\1\1o\0\25\0\0\0/org/fre"..., 128}, {"", 0}], msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL) = 128
clock_gettime(CLOCK_MONOTONIC, {6904, 291655694}) = 0
poll([{fd=4, events=POLLIN}], 1, 25000) = 1 ([{fd=4, revents=POLLIN}])
recvmsg(4, {msg_name(0)=NULL, msg_iov(1)=[{"l\2\1\1\n\0\0\0\1\0\0\0=\0\0\0\6\1s\0\5\0\0\0:1.32\0\0\0"..., 2048}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 260
recvmsg(4, 0xbeda7638, MSG_CMSG_CLOEXEC) = -1 EAGAIN (Resource temporarily unavailable)
sendmsg(4, {msg_name(0)=NULL, msg_iov(2)=[{"l\1\0\1!\0\0\0\2\0\0\0\177\0\0\0\1\1o\0\25\0\0\0/org/fre"..., 144}, {"\34\0\0\0eavesdrop=true,type='signal'"..., 33}], msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL) = 177
clock_gettime(CLOCK_MONOTONIC, {6904, 296191425}) = 0
poll([{fd=4, events=POLLIN}], 1, 25000) = 1 ([{fd=4, revents=POLLIN}])
recvmsg(4, {msg_name(0)=NULL, msg_iov(1)=[{"l\2\1\1\0\0\0\0\3\0\0\0005\0\0\0\6\1s\0\5\0\0\0:1.32\0\0\0"..., 2048}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 72
recvmsg(4, 0xbeda7678, MSG_CMSG_CLOEXEC) = -1 EAGAIN (Resource temporarily unavailable)
sendmsg(4, {msg_name(0)=NULL, msg_iov(2)=[{"l\1\0\1&\0\0\0\3\0\0\0\177\0\0\0\1\1o\0\25\0\0\0/org/fre"..., 144}, {"!\0\0\0eavesdrop=true,type='method_"..., 38}], msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL) = 182
clock_gettime(CLOCK_MONOTONIC, {6904, 300439300}) = 0
poll([{fd=4, events=POLLIN}], 1, 25000) = 1 ([{fd=4, revents=POLLIN}])
recvmsg(4, {msg_name(0)=NULL, msg_iov(1)=[{"l\2\1\1\0\0\0\0\4\0\0\0005\0\0\0\6\1s\0\5\0\0\0:1.32\0\0\0"..., 2048}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 72
recvmsg(4, 0xbeda7678, MSG_CMSG_CLOEXEC) = -1 EAGAIN (Resource temporarily unavailable)
sendmsg(4, {msg_name(0)=NULL, msg_iov(2)=[{"l\1\0\1(\0\0\0\4\0\0\0\177\0\0\0\1\1o\0\25\0\0\0/org/fre"..., 144}, {"#\0\0\0eavesdrop=true,type='method_"..., 40}], msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL) = 184
clock_gettime(CLOCK_MONOTONIC, {6904, 304297370}) = 0
poll([{fd=4, events=POLLIN}], 1, 25000) = 1 ([{fd=4, revents=POLLIN}])
recvmsg(4, {msg_name(0)=NULL, msg_iov(1)=[{"l\2\1\1\0\0\0\0\5\0\0\0005\0\0\0\6\1s\0\5\0\0\0:1.32\0\0\0"..., 2048}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 72
recvmsg(4, 0xbeda7678, MSG_CMSG_CLOEXEC) = -1 EAGAIN (Resource temporarily unavailable)
sendmsg(4, {msg_name(0)=NULL, msg_iov(2)=[{"l\1\0\1 \0\0\0\5\0\0\0\177\0\0\0\1\1o\0\25\0\0\0/org/fre"..., 144}, {"\33\0\0\0eavesdrop=true,type='error'\0", 32}], msg_controllen=0, msg_flags=0}, MSG_NOSIGNAL) = 176
clock_gettime(CLOCK_MONOTONIC, {6904, 308395320}) = 0
poll([{fd=4, events=POLLIN}], 1, 25000) = 1 ([{fd=4, revents=POLLIN}])
recvmsg(4, {msg_name(0)=NULL, msg_iov(1)=[{"l\2\1\1\0\0\0\0\6\0\0\0005\0\0\0\6\1s\0\5\0\0\0:1.32\0\0\0"..., 2048}], msg_controllen=0, msg_flags=MSG_CMSG_CLOEXEC}, MSG_CMSG_CLOEXEC) = 72
recvmsg(4, 0xbeda7678, MSG_CMSG_CLOEXEC) = -1 EAGAIN (Resource temporarily unavailable)
gettimeofday({1389227396, 454404}, NULL) = 0
send(3, "<29>Jan  9 00:29:56 snort[774]: "..., 64, MSG_NOSIGNAL) = 64
gettimeofday({1389227396, 461558}, NULL) = 0
send(3, "<29>Jan  9 00:29:56 snort[774]: "..., 71, MSG_NOSIGNAL) = 71
gettimeofday({1389227396, 462547}, NULL) = 0
send(3, "<29>Jan  9 00:29:56 snort[774]: "..., 57, MSG_NOSIGNAL) = 57
getppid()                               = 771
rt_sigaction(SIGCHLD, {0x3b1b0, [], 0x4000000 /* SA_??? */}, {SIG_DFL, [], 0}, 8) = 0
fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 0), ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb6f82000
write(1, "Spawning daemon child...\n", 25) = 25
clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xb6fa2068) = 776
--- SIGCHLD {si_signo=SIGCHLD, si_code=SI_USER, si_pid=776, si_uid=0} ---
sigreturn() (mask [FPE USR1 USR2 STKFLT CHLD STOP TSTP TTIN TTOU URG VTALRM]) = 776
write(1, "My daemon child 776 lives...\n", 29) = 29
rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0
rt_sigaction(SIGCHLD, NULL, {0x3b1b0, [], 0x4000000 /* SA_??? */}, 8) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
nanosleep({1, 0}, 0xbeda798c)           = 0
wait4(776, 0xbeda7b3c, WNOHANG, NULL)   = 0
write(1, "Daemon parent exiting (0)\n", 26) = 26
exit_group(0)                           = ?
+++ exited with 0 +++
-------------- next part --------------
A non-text attachment was scrubbed...
Name: snort.conf
Type: application/octet-stream
Size: 19904 bytes
Desc: not available
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20140108/162bcdd8/attachment.obj>


More information about the Snort-users mailing list