execve("/usr/sbin/pppd.org", ["/usr/sbin/pppd.org"], [/* 17 vars */]) = 0
brk(0) = 0x81c5000
uname({sys="Linux", node="vs01-vc01.vodacom.co.za", ...}) = 0
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=9024, ...}) = 0
mmap2(NULL, 9024, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7f39000
close(3) = 0
open("/lib/libutil.so.1", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260\f\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=13388, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f38000
mmap2(NULL, 12432, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x497000
mmap2(0x499000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0x499000
close(3) = 0
open("/lib/libcrypt.so.1", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\7\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=25928, ...}) = 0
mmap2(NULL, 184636, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x1d6000
mmap2(0x1db000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4) = 0x1db000
mmap2(0x1dd000, 155964, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1dd000
close(3) = 0
open("/lib/libpam.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\37"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=48056, ...}) = 0
mmap2(NULL, 50956, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xd7c000
mmap2(0xd88000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xb) = 0xd88000
close(3) = 0
open("/lib/libdl.so.2", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@\f\0\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=14612, ...}) = 0
mmap2(NULL, 12412, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x12c000
mmap2(0x12e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1) = 0x12e000
close(3) = 0
open("/usr/lib/libpcap.so.0.9.4", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\3008\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=167092, ...}) = 0
mmap2(NULL, 167888, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4af000
mmap2(0x4d7000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x28) = 0x4d7000
close(3) = 0
open("/lib/libc.so.6", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0JX\1\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1529400, ...}) = 0
mmap2(NULL, 1254780, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x204000
mmap2(0x331000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12d) = 0x331000
mmap2(0x334000, 9596, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x334000
close(3) = 0
open("/lib/libaudit.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0000\31\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=62908, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f37000
mmap2(NULL, 65800, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xde3000
mmap2(0xdf2000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xe) = 0xdf2000
close(3) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f36000
set_thread_area({entry_number:-1 -> 6, base_addr:0xb7f366c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0
mprotect(0x331000, 8192, PROT_READ) = 0
mprotect(0x12e000, 4096, PROT_READ) = 0
mprotect(0x1db000, 4096, PROT_READ) = 0
mprotect(0x499000, 4096, PROT_READ) = 0
mprotect(0x12a000, 4096, PROT_READ) = 0
munmap(0xb7f39000, 9024) = 0
socket(PF_FILE, SOCK_DGRAM, 0) = 3
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0
connect(3, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
uname({sys="Linux", node="vs01-vc01.vodacom.co.za", ...}) = 0
umask(0777) = 022
umask(022) = 0777
getuid32() = 0
brk(0) = 0x81c5000
brk(0x81e6000) = 0x81e6000
getgroups32(65536, [0, 1, 2, 3, 4, 6, 10]) = 7
gettimeofday({1155813160, 805264}, NULL) = 0
getpid() = 17529
open("/etc/ppp/options", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=5, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f3b000
read(4, "lock\n", 4096) = 5
read(4, "", 4096) = 0
close(4) = 0
munmap(0xb7f3b000, 4096) = 0
getuid32() = 0
socket(PF_FILE, SOCK_STREAM, 0) = 4
fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0
connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(4) = 0
socket(PF_FILE, SOCK_STREAM, 0) = 4
fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0
connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
close(4) = 0
open("/etc/nsswitch.conf", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=1696, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f3b000
read(4, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1696
read(4, "", 4096) = 0
close(4) = 0
munmap(0xb7f3b000, 4096) = 0
open("/etc/ld.so.cache", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=9024, ...}) = 0
mmap2(NULL, 9024, PROT_READ, MAP_PRIVATE, 4, 0) = 0xb7f39000
close(4) = 0
open("/lib/libnss_files.so.2", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \33\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=46608, ...}) = 0
mmap2(NULL, 41616, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x99c000
mmap2(0x9a5000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x8) = 0x9a5000
close(4) = 0
mprotect(0x9a5000, 4096, PROT_READ) = 0
munmap(0xb7f39000, 9024) = 0
open("/etc/passwd", O_RDONLY) = 4
fcntl64(4, F_GETFD) = 0
fcntl64(4, F_SETFD, FD_CLOEXEC) = 0
fstat64(4, {st_mode=S_IFREG|0644, st_size=805, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f3b000
read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 805
close(4) = 0
munmap(0xb7f3b000, 4096) = 0
getuid32() = 0
setresuid32(-1, 0, -1) = 0
open("/root/.ppprc", O_RDONLY) = -1 ENOENT (No such file or directory)
setresuid32(-1, 0, -1) = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0
readlink("/proc/self/fd/0", "/dev/pts/0", 4095) = 10
stat64("/dev/pts/0", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0
open("/etc/ppp/options.pts.0", O_RDONLY) = -1 ENOENT (No such file or directory)
geteuid32() = 0
uname({sys="Linux", node="vs01-vc01.vodacom.co.za", ...}) = 0
open("/dev/ppp", O_RDWR) = 4
close(4) = 0
open("/etc/mtab", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f3b000
read(4, "simfs / simfs rw 0 0\nproc /proc "..., 1024) = 74
close(4) = 0
munmap(0xb7f3b000, 4096) = 0
open("/proc/net/route", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f3b000
read(4, "Iface\tDestination\tGateway \tFlags"..., 1024) = 512
close(4) = 0
munmap(0xb7f3b000, 4096) = 0
gettimeofday({1155813160, 811316}, NULL) = 0
open("/etc/resolv.conf", O_RDONLY) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=81, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_AN