Am Freitag, den 07.09.2007, 18:14 +0200 schrieb Rainer Gerhards:
> Hi all,
>
> Rsyslog 1.19.5 has been released. It is primarily targeted at fixing
> rare situations in which a segfault could occur. These have not
> consistently been able to reproduce in lab. Release 1.19.5 may still
The way I see it everyone reporting segfaults so far has been using
RHEL5. So perhaps everybody seeing problems could comment on the
operating-system? That might ease reproducing the problem in a
test-lab.
> have a problem or may hang where previous versions segfaulted. We are
> actively looking for feedback from the field. Feature-wise, the $ModDir
> config directive has been added and $ModLoad has been enhanced. We
> recommend upgrading only for those that experience the problem with
> earlier versions or those actively interested in helping to solve the
> bug. If you experience a bug, please report it.
Crash of 1.19.5 after less than 30 minutes. Stack-trace seems to be
quite "normal", however, I've been lucky and captured some
strace-information. Not sure wheter that could be helpful.
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "P*\1\0\0\1\0\0\0\0\0\0\00282\003185\00213\003129\7in-a"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "P*\205\200\0\1\0\1\0\6\0\7\00282\003185\00213\003129
\7"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<22>exim[14623]: 2007-09-07 18:3"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.82")}, [16]) = 165
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "\236\222\1\0\0\1\0\0\0\0\0\0\00282\003185\00213\003129"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "\236\222\205\200\0\1\0\1\0\6\0\7\00282\003185\00213
\003"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<22>exim[14099]: 2007-09-07 18:3"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.82")}, [16]) = 243
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "\377\251\1\0\0\1\0\0\0\0\0\0\00282\003185\00213\003129"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "\377\251\205\200\0\1\0\1\0\6\0\7\00282\003185\00213
\003"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<22>spamd[16561]: spamd: identif"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.81")}, [16]) = 94
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "\202\24\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "\202\24\205\200\0\1\0\1\0\6\0\7\00281\003185\00213
\003"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<22>spamd[16561]: spamd: result:"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.81")}, [16]) = 463
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "\33\\\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "\33\\\205\200\0\1\0\1\0\6\0\7\00281\003185\00213
\00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<22>exim[15976]: 2007-09-07 18:3"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.81")}, [16]) = 143
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "I\27\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7in"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "I\27\205\200\0\1\0\1\0\6\0\7\00281\003185\00213
\003129"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<22>exim[15583]: 2007-09-07 18:3"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.81")}, [16]) = 318
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "v\325\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "v\325\205\200\0\1\0\1\0\6\0\7\00281\003185\00213
\00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<21>exim[15583]: 2007-09-07 18:3"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.81")}, [16]) = 318
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
futex(0x3627949960, FUTEX_WAKE, 1) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "+\330\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "+\330\205\200\0\1\0\1\0\6\0\7\00281\003185\00213
\00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<13>greylistd: Socket error: Bro"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.81")}, [16]) = 41
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "+\366\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "+\366\205\200\0\1\0\1\0\6\0\7\00281\003185\00213
\00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<21>exim[15583]: 2007-09-07 18:3"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.81")}, [16]) = 318
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "\233A\1\0\0\1\0\0\0\0\0\0\00281\003185\00213\003129\7i"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "\233A\205\200\0\1\0\1\0\6\0\7\00281\003185\00213
\00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = 1 (in [5])
recvfrom(5, "<22>exim[14536]: 2007-09-07 18:3"..., 2047, 0,
{sa_family=AF_INET, sin_port=htons(514),
sin_addr=inet_addr("129.13.185.82")}, [16]) = 171
rt_sigprocmask(SIG_BLOCK, [HUP], [], 8) = 0
open("/etc/hosts", O_RDONLY) = 17
fcntl(17, F_GETFD) = 0
fcntl(17, F_SETFD, FD_CLOEXEC) = 0
fstat(17, {st_mode=S_IFREG|0644, st_size=234, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0)
= 0x2aaab4000000
read(17, "# Do not remove the following li"..., 4096) = 234
read(17, "", 4096) = 0
close(17) = 0
munmap(0x2aaab4000000, 4096) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 17
connect(17, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, 28) = 0
fcntl(17, F_GETFL) = 0x2 (flags O_RDWR)
fcntl(17, F_SETFL, O_RDWR|O_NONBLOCK) = 0
poll([{fd=17, events=POLLOUT, revents=POLLOUT}], 1, 0) = 1
sendto(17, "M\243\1\0\0\1\0\0\0\0\0\0\00282\003185\00213\003129\7i"...,
44, MSG_NOSIGNAL, NULL, 0) = 44
poll([{fd=17, events=POLLIN, revents=POLLIN}], 1, 5000) = 1
ioctl(17, FIONREAD, [344]) = 0
recvfrom(17, "M\243\205\200\0\1\0\1\0\6\0\7\00282\003185\00213
\00312"..., 1024, 0, {sa_family=AF_INET, sin_port=htons(53),
sin_addr=inet_addr("129.13.96.2")}, [16]) = 344
close(17) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 17
bind(17, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(17, {sa_family=AF_NETLINK, pid=22923, groups=00000000},
[4294967308]) = 0
sendto(17, "\24\0\0\0\26\0\1\3\213~\341F\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"<\0\0\0\24\0\2\0\213~\341F\213Y\0\0\2\10
\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"@\0\0\0\24\0\2\0\213~\341F\213Y\0\0\n
\200\200\376\1\0\0"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(17, {msg_name(12)={sa_family=AF_NETLINK, pid=0,
groups=00000000}, msg_iov(1)=[{"\24\0\0\0\3\0\2\0\213~\341F\213Y\0\0\0\0
\0\0\1\0\0\0\24"..., 4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(17) = 0
rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0
futex(0x192fd054, 0x5 /* FUTEX_??? */, 1) = 1
select(6, [0 4 5], [], NULL, NULL) = ? ERESTARTNOHAND (To be
restarted)
trace: ptrace(PTRACE_SYSCALL, ...): No such process
Process 22923 detached
--
CU,
Patrick.