execve("/sbin/dropbear", ["/sbin/dropbear", "-E", "-F"], [/* 10 vars */]) = 0 brk(0) = 0x211e000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27b403a000 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/lib/tls/x86_64/libutil.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/lib/tls/x86_64", 0x7fffd0a54320) = -1 ENOENT (No such file or directory) open("/lib/tls/libutil.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/lib/tls", 0x7fffd0a54320) = -1 ENOENT (No such file or directory) open("/lib/x86_64/libutil.so.1", O_RDONLY) = -1 ENOENT (No such file or directory) stat("/lib/x86_64", 0x7fffd0a54320) = -1 ENOENT (No such file or directory) open("/lib/libutil.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0 \16\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=10144, ...}) = 0 mmap(NULL, 2105368, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f27b3c1b000 mprotect(0x7f27b3c1d000, 2093056, PROT_NONE) = 0 mmap(0x7f27b3e1c000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x7f27b3e1c000 close(3) = 0 open("/lib/libz.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@ \0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=88368, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27b4039000 mmap(NULL, 2183664, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f27b3a05000 mprotect(0x7f27b3a1a000, 2093056, PROT_NONE) = 0 mmap(0x7f27b3c19000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14000) = 0x7f27b3c19000 close(3) = 0 open("/lib/libcrypt.so.1", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0`\n\0\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=38816, ...}) = 0 mmap(NULL, 2322784, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f27b37cd000 mprotect(0x7f27b37d5000, 2097152, PROT_NONE) = 0 mmap(0x7f27b39d5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x7f27b39d5000 mmap(0x7f27b39d7000, 184672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f27b39d7000 close(3) = 0 open("/lib/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\320\354\1\0\0\0\0\0"..., 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=1399848, ...}) = 0 mmap(NULL, 3508136, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f27b3474000 mprotect(0x7f27b35c4000, 2093056, PROT_NONE) = 0 mmap(0x7f27b37c3000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x14f000) = 0x7f27b37c3000 mmap(0x7f27b37c8000, 18344, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f27b37c8000 close(3) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27b4038000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27b4037000 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27b4036000 arch_prctl(ARCH_SET_FS, 0x7f27b4037700) = 0 mprotect(0x7f27b37c3000, 16384, PROT_READ) = 0 mprotect(0x7f27b39d5000, 4096, PROT_READ) = 0 mprotect(0x7f27b3c19000, 4096, PROT_READ) = 0 mprotect(0x7f27b3e1c000, 4096, PROT_READ) = 0 mprotect(0x624000, 4096, PROT_READ) = 0 mprotect(0x7f27b403b000, 4096, PROT_READ) = 0 setrlimit(RLIMIT_CORE, {rlim_cur=0, rlim_max=0}) = 0 brk(0) = 0x211e000 brk(0x213f000) = 0x213f000 rt_sigaction(SIGINT, {0x40fec0, [INT], SA_RESTORER|SA_RESTART, 0x7f27b34a6220}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGTERM, {0x40fec0, [TERM], SA_RESTORER|SA_RESTART, 0x7f27b34a6220}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGPIPE, {SIG_IGN, [PIPE], SA_RESTORER|SA_RESTART, 0x7f27b34a6220}, {SIG_DFL, [], 0}, 8) = 0 rt_sigaction(SIGCHLD, {0x40fff0, ~[HUP INT QUIT ILL TRAP ABRT FPE ALRM TERM CONT STOP TSTP TTIN TTOU PROF WINCH SYS RT_4 RT_5 RT_7 RT_8 RT_16 RT_17 RT_18 RT_19 RT_20 RT_21 RT_22 RT_23 RT_24 RT_25 RT_26 RT_27 RT_28 RT_29 RT_30 RT_31], SA_RESTORER|SA_NOCLDSTOP, 0x7f27b34a6220}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {0x40ffc0, [SEGV], SA_RESTORER|SA_RESTART, 0x7f27b34a6220}, {SIG_DFL, [], 0}, 8) = 0 open("/etc/dropbear/dropbear_rsa_host_key", O_RDONLY) = 3 read(3, "\0\0\0\7ssh-rsa\0\0\0\1#\0\0\1\1\0\330\274\371\222\246\246\206\224\322\255\232"..., 1700) = 803 read(3, "", 897) = 0 close(3) = 0 open("/etc/dropbear/dropbear_dss_host_key", O_RDONLY) = 3 read(3, "\0\0\0\7ssh-dss\0\0\0\201\0\220/\333`8\270d\213\265\266\0\357=\r\263w"..., 1700) = 459 read(3, "", 1241) = 0 close(3) = 0 open("/dev/urandom", O_RDONLY) = 3 select(4, [3], NULL, NULL, {2, 0}) = 1 (in [3], left {1, 999984}) read(3, "\35\305\213\354\2162\177\362!hn\231\345Q\7\27\243\2702\226J\353\244K\24\263,0\365\234r/", 32) = 32 close(3) = 0 socket(PF_NETLINK, SOCK_RAW, 0) = 3 bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0 getsockname(3, {sa_family=AF_NETLINK, pid=761, groups=00000000}, [12]) = 0 gettimeofday({1277594082, 237022}, NULL) = 0 sendto(3, "\24\0\0\0\26\0\1\3\342\211&L\0\0\0\0\0\0\0\0", 20, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"0\0\0\0\24\0\2\0\342\211&L\371\2\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 108 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\342\211&L\371\2\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128 recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\342\211&L\371\2\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20 close(3) = 0 open("/etc/gai.conf", O_RDONLY) = 3 fstat(3, {st_mode=S_IFREG|0644, st_size=2917, ...}) = 0 fstat(3, {st_mode=S_IFREG|0644, st_size=2917, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27b4035000 read(3, "# Configuration for getaddrinfo("..., 4096) = 2917 read(3, "", 4096) = 0 close(3) = 0 munmap(0x7f27b4035000, 4096) = 0 socket(PF_INET6, SOCK_DGRAM, IPPROTO_IP) = 3 connect(3, {sa_family=AF_INET6, sin6_port=htons(22), inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = 0 getsockname(3, {sa_family=AF_INET6, sin6_port=htons(51566), inet_pton(AF_INET6, "::1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 connect(3, {sa_family=AF_UNSPEC, sa_data="\0\0\0\0\0\0\0\0\0\0\0\0\0\0"}, 16) = 0 connect(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 getsockname(3, {sa_family=AF_INET6, sin6_port=htons(38201), inet_pton(AF_INET6, "::ffff:127.0.0.1", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, [28]) = 0 close(3) = 0 socket(PF_INET, SOCK_STREAM, IPPROTO_TCP) = 3 setsockopt(3, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 setsockopt(3, SOL_SOCKET, SO_LINGER, {onoff=1, linger=5}, 8) = 0 setsockopt(3, SOL_TCP, TCP_NODELAY, [1], 4) = 0 setsockopt(3, SOL_IP, IP_TOS, [16], 4) = 0 setsockopt(3, SOL_SOCKET, SO_PRIORITY, [6], 4) = 0 bind(3, {sa_family=AF_INET, sin_port=htons(22), sin_addr=inet_addr("0.0.0.0")}, 16) = 0 listen(3, 20) = 0 socket(PF_INET6, SOCK_STREAM, IPPROTO_TCP) = 4 setsockopt(4, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0 setsockopt(4, SOL_SOCKET, SO_LINGER, {onoff=1, linger=5}, 8) = 0 setsockopt(4, SOL_TCP, TCP_NODELAY, [1], 4) = 0 setsockopt(4, SOL_IP, IP_TOS, [16], 4) = 0 setsockopt(4, SOL_SOCKET, SO_PRIORITY, [6], 4) = 0 bind(4, {sa_family=AF_INET6, sin6_port=htons(22), inet_pton(AF_INET6, "::", &sin6_addr), sin6_flowinfo=0, sin6_scope_id=0}, 28) = -1 EADDRINUSE (Address already in use) close(4) = 0 gettimeofday({1277594082, 261367}, NULL) = 0 open("/etc/localtime", O_RDONLY) = 4 fstat(4, {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 fstat(4, {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27b4035000 read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10\0\0\0\0"..., 4096) = 2309 lseek(4, -1467, SEEK_CUR) = 842 read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\t\0\0\0\t\0\0\0\0"..., 4096) = 1467 close(4) = 0 munmap(0x7f27b4035000, 4096) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 getpid() = 761 write(2, "[761] Jun 27 01:14:42 Not backgr"..., 40) = 40 open("/var/run/dropbear.pid", O_WRONLY|O_CREAT|O_TRUNC, 0666) = 4 fstat(4, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f27b4035000 write(4, "761\n", 4) = 4 close(4) = 0 munmap(0x7f27b4035000, 4096) = 0 select(4, [3], NULL, NULL, NULL) = 1 (in [3]) accept(3, {sa_family=AF_INET, sin_port=htons(37219), sin_addr=inet_addr("192.168.1.2")}, [16]) = 4 pipe([5, 6]) = 0 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x7f27b40379d0) = 762 close(6) = 0 close(4) = 0 select(6, [3 5], NULL, NULL, NULL) = 1 (in [5]) close(5) = 0 select(6, [3], NULL, NULL, NULL) = ? ERESTARTNOHAND (To be restarted) --- SIGCHLD (Child exited) @ 0 (0) --- wait4(-1, NULL, WNOHANG, NULL) = 762 wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes) rt_sigaction(SIGCHLD, {0x40fff0, ~[HUP INT QUIT TRAP BUS FPE KILL PIPE ALRM TERM CHLD CONT XCPU PROF WINCH SYS RT_4 RT_5 RT_7 RT_8 RT_16 RT_17 RT_18 RT_19 RT_20 RT_21 RT_22 RT_23 RT_24 RT_25 RT_26 RT_27 RT_28 RT_29 RT_30 RT_31], SA_RESTORER|SA_NOCLDSTOP, 0x7f27b34a6220}, NULL, 8) = 0 rt_sigreturn(0x11) = -1 EINTR (Interrupted system call) select(6, [3], NULL, NULL, NULL) = ? ERESTARTNOHAND (To be restarted) --- SIGINT (Interrupt) @ 0 (0) --- rt_sigreturn(0x2) = -1 EINTR (Interrupted system call) unlink("/var/run/dropbear.pid") = 0 gettimeofday({1277594093, 373312}, NULL) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2309, ...}) = 0 write(2, "[761] Jun 27 01:14:53 premature "..., 59) = 59 exit_group(1) = ?