strace -f ps aux
execve("/bin/ps", ["ps", "aux"], [/* 10 vars */]) = 0
brk(0) = 0x1514000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfe21000
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfe1f000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0644, st_size=13002, ...}) = 0
mmap(NULL, 13002, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7f43bfe1b000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/libproc-3.2.7.so", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\240?\0\0\0\0\0\0@"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0644, st_size=68064, ...}) = 0
mmap(NULL, 2239928, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f43bf9e4000
mprotect(0x7f43bf9f4000, 2093056, PROT_NONE) = 0
mmap(0x7f43bfbf3000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xf000) = 0x7f43bfbf3000
mmap(0x7f43bfbf5000, 73144, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f43bfbf5000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\300\342\1\0\0\0\0\0@"..., 832) = 832
fstat(3, {st_mode=S_IFREG|0755, st_size=1375536, ...}) = 0
mmap(NULL, 3482232, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x7f43bf691000
mprotect(0x7f43bf7db000, 2093056, PROT_NONE) = 0
mmap(0x7f43bf9da000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x149000) = 0x7f43bf9da000
mmap(0x7f43bf9df000, 17016, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f43bf9df000
close(3) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfe1a000
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfe19000
arch_prctl(ARCH_SET_FS, 0x7f43bfe196e0) = 0
mprotect(0x7f43bf9da000, 12288, PROT_READ) = 0
munmap(0x7f43bfe1b000, 13002) = 0
brk(0) = 0x1514000
brk(0x1535000) = 0x1535000
open("/proc/version", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfe1e000
read(3, "Linux version 2.6.32-afanasyev.1 "..., 1024) = 145
close(3) = 0
munmap(0x7f43bfe1e000, 4096) = 0
open("/proc/stat", O_RDONLY) = 3
fstat(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfe1e000
read(3, "cpu 1761 0 725 59883 0 0 0 0\ncpu"..., 1024) = 179
read(3, ""..., 1024) = 0
close(3) = 0
munmap(0x7f43bfe1e000, 4096) = 0
rt_sigaction(SIGSYS, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGPWR, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGIO, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGVTALRM, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGXFSZ, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGXCPU, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGURG, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGTTIN, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGCONT, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGCHLD, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGSTKFLT, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGTERM, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGALRM, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGPIPE, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGUSR2, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGSEGV, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGUSR1, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGFPE, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGBUS, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGABRT, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGTRAP, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGILL, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
rt_sigaction(SIGHUP, {0x401bfc, ~[RTMIN RT_1], SA_RESTORER, 0x7f43bf6c2f60}, NULL, 8) = 0
open("/proc/self/stat", O_RDONLY) = 3
read(3, "1002 (ps) R 1001 1001 952 34816 1"..., 1023) = 244
close(3) = 0
ioctl(1, TIOCGWINSZ, {ws_row=29, ws_col=114, ws_xpixel=1026, ws_ypixel=493}) = 0
ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
geteuid() = 0
open("/proc/uptime", O_RDONLY) = 3
lseek(3, 0, SEEK_SET) = 0
read(3, "588.10 1575.30\n"..., 1023) = 15
open("/proc/sys/kernel/pid_max", O_RDONLY) = 4
read(4, "32768\n"..., 24) = 6
close(4) = 0
mmap(NULL, 139264, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfdf7000
mprotect(0x7f43bfe18000, 4096, PROT_NONE) = 0
gettimeofday({1272195609, 356016}, NULL) = 0
open("/proc/meminfo", O_RDONLY) = 4
lseek(4, 0, SEEK_SET) = 0
read(4, "MemTotal: 4 kB\nMemFr"..., 1023) = 112
stat("/proc/self/task", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc", O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC) = 5
fstat(5, {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
fcntl(5, F_GETFD) = 0x1 (flags FD_CLOEXEC)
getdents(5, /* 37 entries */, 1024) = 1024
stat("/proc/1", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/1/stat", O_RDONLY) = 6
read(6, "1 (init) S 0 1 1 0 -1 4194560 271"..., 1023) = 258
close(6) = 0
open("/proc/1/status", O_RDONLY) = 6
read(6, "Name:\tinit\nState:\tS (sleeping)\nTg"..., 1023) = 723
close(6) = 0
socket(PF_FILE, SOCK_STREAM, 0) = 6
fcntl(6, F_SETFL, O_RDWR|O_NONBLOCK) = 0
connect(6, {sa_family=AF_FILE, path="/var/run/nscd/socket"...}, 110) = -1 ENOENT (No such file or directory)
close(6) = 0
socket(PF_FILE, SOCK_STREAM, 0) = 6
fcntl(6, F_SETFL, O_RDWR|O_NONBLOCK) = 0
connect(6, {sa_family=AF_FILE, path="/var/run/nscd/socket"...}, 110) = -1 ENOENT (No such file or directory)
close(6) = 0
open("/etc/nsswitch.conf", O_RDONLY) = 6
fstat(6, {st_mode=S_IFREG|0644, st_size=475, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfe1e000
read(6, "# /etc/nsswitch.conf\n#\n# Example "..., 4096) = 475
read(6, ""..., 4096) = 0
close(6) = 0
munmap(0x7f43bfe1e000, 4096) = 0
open("/etc/ld.so.cache", O_RDONLY) = 6
fstat(6, {st_mode=S_IFREG|0644, st_size=13002, ...}) = 0
mmap(NULL, 13002, PROT_READ, MAP_PRIVATE, 6, 0) = 0x7f43bfe1b000
close(6) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/libnss_compat.so.2", O_RDONLY) = 6
read(6, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\22\0\0\0\0\0\0@"..., 832) = 832
fstat(6, {st_mode=S_IFREG|0644, st_size=31536, ...}) = 0
mmap(NULL, 2127088, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0x7f43bf489000
mprotect(0x7f43bf490000, 2093056, PROT_NONE) = 0
mmap(0x7f43bf68f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x6000) = 0x7f43bf68f000
close(6) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/libnsl.so.1", O_RDONLY) = 6
read(6, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0@@\0\0\0\0\0\0@"..., 832) = 832
fstat(6, {st_mode=S_IFREG|0644, st_size=88968, ...}) = 0
mmap(NULL, 2194096, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0x7f43bf271000
mprotect(0x7f43bf286000, 2093056, PROT_NONE) = 0
mmap(0x7f43bf485000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x14000) = 0x7f43bf485000
mmap(0x7f43bf487000, 6832, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x7f43bf487000
close(6) = 0
munmap(0x7f43bfe1b000, 13002) = 0
open("/etc/ld.so.cache", O_RDONLY) = 6
fstat(6, {st_mode=S_IFREG|0644, st_size=13002, ...}) = 0
mmap(NULL, 13002, PROT_READ, MAP_PRIVATE, 6, 0) = 0x7f43bfe1b000
close(6) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/libnss_nis.so.2", O_RDONLY) = 6
read(6, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\20 \0\0\0\0\0\0@"..., 832) = 832
fstat(6, {st_mode=S_IFREG|0644, st_size=43472, ...}) = 0
mmap(NULL, 2139352, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0x7f43bf066000
mprotect(0x7f43bf06f000, 2097152, PROT_NONE) = 0
mmap(0x7f43bf26f000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0x9000) = 0x7f43bf26f000
close(6) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/libnss_files.so.2", O_RDONLY) = 6
read(6, "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\37\0\0\0\0\0\0@"..., 832) = 832
fstat(6, {st_mode=S_IFREG|0644, st_size=47520, ...}) = 0
mmap(NULL, 2143528, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 6, 0) = 0x7f43bee5a000
mprotect(0x7f43bee64000, 2097152, PROT_NONE) = 0
mmap(0x7f43bf064000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 6, 0xa000) = 0x7f43bf064000
close(6) = 0
munmap(0x7f43bfe1b000, 13002) = 0
open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
fcntl(6, F_GETFD) = 0x1 (flags FD_CLOEXEC)
lseek(6, 0, SEEK_CUR) = 0
fstat(6, {st_mode=S_IFREG|0644, st_size=1096, ...}) = 0
mmap(NULL, 1096, PROT_READ, MAP_SHARED, 6, 0) = 0x7f43bfe1e000
lseek(6, 1096, SEEK_SET) = 1096
munmap(0x7f43bfe1e000, 1096) = 0
close(6) = 0
open("/proc/1/cmdline", O_RDONLY) = 6
read(6, "init [2]\0\0\0\0 \0"..., 2047) = 15
close(6) = 0
fstat(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfe1e000
write(1, "USER PID %CPU %MEM VSZ "..., 73USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
) = 73
open("/etc/localtime", O_RDONLY) = 6
fstat(6, {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
fstat(6, {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7f43bfe1d000
read(6, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\0\0\0\f\0\0\0\0\0"..., 4096) = 2194
lseek(6, -1379, SEEK_CUR) = 815
read(6, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\r\0\0\0\r\0\0\0\0\0"..., 4096) = 1379
close(6) = 0
munmap(0x7f43bfe1d000, 4096) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 1 0.0 99.9 10312 "..., 80root 1 0.0 99.9 10312 740 ? Ss 15:30 0:00 init [2]
) = 80
stat("/proc/337", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/337/stat", O_RDONLY) = 6
read(6, "337 (syslogd) S 1 337 337 0 -1 42"..., 1023) = 256
close(6) = 0
open("/proc/337/status", O_RDONLY) = 6
read(6, "Name:\tsyslogd\nState:\tS (sleeping)"..., 1023) = 732
close(6) = 0
open("/proc/337/cmdline", O_RDONLY) = 6
read(6, "/sbin/syslogd\0"..., 2047) = 14
close(6) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 337 0.0 99.9 5904 "..., 79root 337 0.0 99.9 5904 668 ? Ss 15:30 0:00 /sbin/syslogd
) = 79
stat("/proc/344", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/344/stat", O_RDONLY) = 6
read(6, "344 (sshd) S 1 344 344 0 -1 42028"..., 1023) = 266
close(6) = 0
open("/proc/344/status", O_RDONLY) = 6
read(6, "Name:\tsshd\nState:\tS (sleeping)\nTg"..., 1023) = 728
close(6) = 0
open("/proc/344/cmdline", O_RDONLY) = 6
read(6, "/usr/sbin/sshd\0"..., 2047) = 15
close(6) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 344 0.0 99.9 48864 "..., 80root 344 0.0 99.9 48864 1168 ? Ss 15:30 0:00 /usr/sbin/sshd
) = 80
stat("/proc/363", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/363/stat", O_RDONLY) = 6
read(6, "363 (xinetd) S 1 363 363 0 -1 419"..., 1023) = 260
close(6) = 0
open("/proc/363/status", O_RDONLY) = 6
read(6, "Name:\txinetd\nState:\tS (sleeping)\n"..., 1023) = 731
close(6) = 0
open("/proc/363/cmdline", O_RDONLY) = 6
read(6, "/usr/sbin/xinetd\0-pidfile\0/var/ru"..., 2047) = 83
close(6) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 363 0.0 99.9 19264 "..., 115root 363 0.0 99.9 19264 920 ? Ss 15:30 0:00 /usr/sbin/xinetd -pidfile /var/run/xinetd.pid -st
) = 115
stat("/proc/389", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/389/stat", O_RDONLY) = 6
read(6, "389 (sendmail-mta) S 1 389 389 0 "..., 1023) = 276
close(6) = 0
open("/proc/389/status", O_RDONLY) = 6
read(6, "Name:\tsendmail-mta\nState:\tS (slee"..., 1023) = 749
close(6) = 0
open("/proc/389/cmdline", O_RDONLY) = 6
read(6, "sendmail: MTA: accepting connecti"..., 2047) = 47
close(6) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 389 0.0 99.9 51180 "..., 112root 389 0.0 99.9 51180 2008 ? Ss 15:30 0:00 sendmail: MTA: accepting connections
) = 112
stat("/proc/420", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/420/stat", O_RDONLY) = 6
read(6, "420 (cron) S 1 420 420 0 -1 41943"..., 1023) = 250
close(6) = 0
open("/proc/420/status", O_RDONLY) = 6
read(6, "Name:\tcron\nState:\tS (sleeping)\nTg"..., 1023) = 729
close(6) = 0
open("/proc/420/cmdline", O_RDONLY) = 6
read(6, "/usr/sbin/cron\0"..., 2047) = 15
close(6) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 420 0.0 99.9 18548 "..., 80root 420 0.0 99.9 18548 948 ? Ss 15:30 0:00 /usr/sbin/cron
) = 80
stat("/proc/813", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/813/stat", O_RDONLY) = 6
read(6, "813 (apache2) S 1 813 813 0 -1 41"..., 1023) = 261
close(6) = 0
open("/proc/813/status", O_RDONLY) = 6
read(6, "Name:\tapache2\nState:\tS (sleeping)"..., 1023) = 733
close(6) = 0
open("/proc/813/cmdline", O_RDONLY) = 6
read(6, "/usr/sbin/apache2\0-k\0start\0"..., 2047) = 27
close(6) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 813 0.0 99.9 119976 "..., 92root 813 0.0 99.9 119976 3392 ? Ss 15:31 0:00 /usr/sbin/apache2 -k start
) = 92
stat("/proc/845", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/845/stat", O_RDONLY) = 6
read(6, "845 (apache2) S 813 813 813 0 -1 "..., 1023) = 261
close(6) = 0
open("/proc/845/status", O_RDONLY) = 6
read(6, "Name:\tapache2\nState:\tS (sleeping)"..., 1023) = 745
close(6) = 0
open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 6
lseek(6, 0, SEEK_CUR) = 0
fstat(6, {st_mode=S_IFREG|0644, st_size=1096, ...}) = 0
mmap(NULL, 1096, PROT_READ, MAP_SHARED, 6, 0) = 0x7f43bfe1d000
lseek(6, 1096, SEEK_SET) = 1096
munmap(0x7f43bfe1d000, 1096) = 0
close(6) = 0
open("/proc/845/cmdline", O_RDONLY) = 6
read(6, "/usr/sbin/apache2\0-k\0start\0"..., 2047) = 27
close(6) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "www-data 845 0.0 99.9 120132 "..., 92www-data 845 0.0 99.9 120132 3076 ? S 15:31 0:00 /usr/sbin/apache2 -k start
) = 92
stat("/proc/951", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/951/stat", O_RDONLY) = 6
read(6, "951 (vzctl) S 0 951 951 0 -1 4194"..., 1023) = 206
close(6) = 0
open("/proc/951/status", O_RDONLY) = 6
read(6, "Name:\tvzctl\nState:\tS (sleeping)\nT"..., 1023) = 732
close(6) = 0
open("/proc/951/cmdline", O_RDONLY) = 6
read(6, "vzctl: pts/0\0\0\0\0"..., 2047) = 16
close(6) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 951 0.0 99.9 11212 "..., 81root 951 0.0 99.9 11212 356 ? Ss 15:39 0:00 vzctl: pts/0
) = 81
stat("/proc/952", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/952/stat", O_RDONLY) = 6
read(6, "952 (bash) S 951 952 952 34816 10"..., 1023) = 279
close(6) = 0
open("/proc/952/status", O_RDONLY) = 6
read(6, "Name:\tbash\nState:\tS (sleeping)\nTg"..., 1023) = 732
close(6) = 0
open("/proc/952/cmdline", O_RDONLY) = 6
read(6, "-bash\0"..., 2047) = 6
close(6) = 0
open("/proc/tty/drivers", O_RDONLY) = -1 ENOENT (No such file or directory)
readlink("/proc/952/fd/2", "/dev/pts/0"..., 127) = 10
stat("/dev/pts/0", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 952 0.0 99.9 17472 "..., 71root 952 0.0 99.9 17472 1724 pts/0 Ss 15:39 0:00 -bash
) = 71
stat("/proc/1001", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/1001/stat", O_RDONLY) = 6
read(6, "1001 (strace) S 952 1001 952 3481"..., 1023) = 267
close(6) = 0
open("/proc/1001/status", O_RDONLY) = 6
read(6, "Name:\tstrace\nState:\tS (sleeping)\n"..., 1023) = 739
close(6) = 0
open("/proc/1001/cmdline", O_RDONLY) = 6
read(6, "strace\0-f\0ps\0aux\0"..., 2047) = 17
close(6) = 0
readlink("/proc/1001/fd/2", "/dev/pts/0"..., 127) = 10
stat("/dev/pts/0", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 1001 0.0 99.9 4108 "..., 82root 1001 0.0 99.9 4108 744 pts/0 S+ 15:40 0:00 strace -f ps aux
) = 82
stat("/proc/1002", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0
open("/proc/1002/stat", O_RDONLY) = 6
read(6, "1002 (ps) R 1001 1001 952 34816 1"..., 1023) = 245
close(6) = 0
open("/proc/1002/status", O_RDONLY) = 6
read(6, "Name:\tps\nState:\tR (running)\nTgid:"..., 1023) = 737
close(6) = 0
open("/proc/1002/cmdline", O_RDONLY) = 6
read(6, "ps\0aux\0"..., 2047) = 7
close(6) = 0
readlink("/proc/1002/fd/2", "/dev/pts/0"..., 127) = 10
stat("/dev/pts/0", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
stat("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2194, ...}) = 0
write(1, "root 1002 0.0 99.9 14728 "..., 72root 1002 0.0 99.9 14728 976 pts/0 R+ 15:40 0:00 ps aux
) = 72
getdents(5, /* 0 entries */, 1024) = 0
close(5) = 0
exit_group(0) = ?