16120 execve("/usr/sbin/pppd", ["pppd"], [/* 16 vars */]) = 0 16120 uname({sys="Linux", node="XXXXX", ...}) = 0 16120 brk(0) = 0x8008d000 16120 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) 16120 open("/etc/ld.so.cache", O_RDONLY) = 3 16120 fstat64(3, {st_mode=S_IFREG|0644, st_size=20424, ...}) = 0 16120 old_mmap(NULL, 20424, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40017000 16120 close(3) = 0 16120 open("/lib/libutil.so.1", O_RDONLY) = 3 16120 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\f\0"..., 512) = 512 16120 fstat64(3, {st_mode=S_IFREG|0755, st_size=12838, ...}) = 0 16120 old_mmap(NULL, 12428, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4001c000 16120 old_mmap(0x4001e000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x4001e000 16120 close(3) = 0 16120 open("/lib/libcrypt.so.1", O_RDONLY) = 3 16120 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\7\0"..., 512) = 512 16120 fstat64(3, {st_mode=S_IFREG|0755, st_size=25487, ...}) = 0 16120 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40020000 16120 old_mmap(NULL, 184636, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40021000 16120 old_mmap(0x40026000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x4000) = 0x40026000 16120 old_mmap(0x40028000, 155964, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40028000 16120 close(3) = 0 16120 open("/lib/libpam.so.0", O_RDONLY) = 3 16120 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\340\26"..., 512) = 512 16120 fstat64(3, {st_mode=S_IFREG|0755, st_size=30584, ...}) = 0 16120 old_mmap(NULL, 29364, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4004f000 16120 old_mmap(0x40056000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7000) = 0x40056000 16120 close(3) = 0 16120 open("/lib/libdl.so.2", O_RDONLY) = 3 16120 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\260\v\0"..., 512) = 512 16120 fstat64(3, {st_mode=S_IFREG|0755, st_size=13620, ...}) = 0 16120 old_mmap(NULL, 12388, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x40057000 16120 old_mmap(0x40059000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1000) = 0x40059000 16120 close(3) = 0 16120 open("/usr/lib/libpcap.so.0.8.3", O_RDONLY) = 3 16120 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\0202\0"..., 512) = 512 16120 fstat64(3, {st_mode=S_IFREG|0755, st_size=138364, ...}) = 0 16120 old_mmap(NULL, 139248, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4005b000 16120 old_mmap(0x4007c000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x21000) = 0x4007c000 16120 close(3) = 0 16120 open("/lib/tls/libc.so.6", O_RDONLY) = 3 16120 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20O\1\000"..., 512) = 512 16120 fstat64(3, {st_mode=S_IFREG|0755, st_size=1451366, ...}) = 0 16120 old_mmap(NULL, 1219772, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x4007d000 16120 old_mmap(0x401a1000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x124000) = 0x401a1000 16120 old_mmap(0x401a5000, 7356, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x401a5000 16120 close(3) = 0 16120 open("/lib/libaudit.so.0", O_RDONLY) = 3 16120 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320N\0"..., 512) = 512 16120 fstat64(3, {st_mode=S_IFREG|0755, st_size=49668, ...}) = 0 16120 old_mmap(NULL, 52616, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x401a7000 16120 old_mmap(0x401b0000, 16384, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0x401b0000 16120 close(3) = 0 16120 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x401b4000 16120 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x401b5000 16120 mprotect(0x401a1000, 4096, PROT_READ) = 0 16120 mprotect(0x40015000, 4096, PROT_READ) = 0 16120 set_thread_area({entry_number:-1 -> 6, base_addr:0x401b4e40, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 16120 munmap(0x40017000, 20424) = 0 16120 socket(PF_FILE, SOCK_DGRAM, 0) = 3 16120 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 16120 connect(3, {sa_family=AF_FILE, path="/dev/log"}, 16) = 0 16120 uname({sys="Linux", node="XXXXX", ...}) = 0 16120 umask(0777) = 022 16120 umask(022) = 0777 16120 getuid32() = 0 16120 brk(0) = 0x8008d000 16120 brk(0x800ae000) = 0x800ae000 16120 getgroups32(65536, [0, 1, 2, 3, 4, 6, 10]) = 7 16120 gettimeofday({1158571643, 848471}, NULL) = 0 16120 getpid() = 16120 16120 open("/etc/ppp/options", O_RDONLY) = 4 16120 fstat64(4, {st_mode=S_IFREG|0644, st_size=134, ...}) = 0 16120 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000 16120 read(4, "name gamer\nremotename vpn\nnoauth"..., 4096) = 134 16120 read(4, "", 4096) = 0 16120 close(4) = 0 16120 munmap(0x40017000, 4096) = 0 16120 getuid32() = 0 16120 socket(PF_FILE, SOCK_STREAM, 0) = 4 16120 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) 16120 fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 16120 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 16120 close(4) = 0 16120 socket(PF_FILE, SOCK_STREAM, 0) = 4 16120 fcntl64(4, F_GETFL) = 0x2 (flags O_RDWR) 16120 fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0 16120 connect(4, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) 16120 close(4) = 0 16120 open("/etc/nsswitch.conf", O_RDONLY) = 4 16120 fstat64(4, {st_mode=S_IFREG|0644, st_size=1623, ...}) = 0 16120 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000 16120 read(4, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1623 16120 read(4, "", 4096) = 0 16120 close(4) = 0 16120 munmap(0x40017000, 4096) = 0 16120 open("/etc/ld.so.cache", O_RDONLY) = 4 16120 fstat64(4, {st_mode=S_IFREG|0644, st_size=20424, ...}) = 0 16120 old_mmap(NULL, 20424, PROT_READ, MAP_PRIVATE, 4, 0) = 0x40017000 16120 close(4) = 0 16120 open("/lib/libnss_files.so.2", O_RDONLY) = 4 16120 read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\32"..., 512) = 512 16120 fstat64(4, {st_mode=S_IFREG|0755, st_size=45800, ...}) = 0 16120 old_mmap(NULL, 41604, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 4, 0) = 0x401b6000 16120 old_mmap(0x401bf000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 4, 0x8000) = 0x401bf000 16120 close(4) = 0 16120 munmap(0x40017000, 20424) = 0 16120 open("/etc/passwd", O_RDONLY) = 4 16120 fcntl64(4, F_GETFD) = 0 16120 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 16120 fstat64(4, {st_mode=S_IFREG|0644, st_size=1093, ...}) = 0 16120 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000 16120 read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1093 16120 close(4) = 0 16120 munmap(0x40017000, 4096) = 0 16120 getuid32() = 0 16120 setresuid32(-1, 0, -1) = 0 16120 open("/root/.ppprc", O_RDONLY) = -1 ENOENT (No such file or directory) 16120 setresuid32(-1, 0, -1) = 0 16120 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 16120 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 16120 readlink("/proc/self/fd/0", "/dev/pts/1", 4095) = 10 16120 stat64("/dev/pts/1", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 1), ...}) = 0 16120 open("/etc/ppp/options.pts.1", O_RDONLY) = -1 ENOENT (No such file or directory) 16120 geteuid32() = 0 16120 uname({sys="Linux", node="XXXXX", ...}) = 0 16120 open("/dev/ppp", O_RDWR) = -1 EPERM (Operation not permitted) 16120 write(2, "pppd: This system lacks kernel s"..., 375) = 375 16120 time([1158571643]) = 1158571643 16120 open("/etc/localtime", O_RDONLY) = 4 16120 fstat64(4, {st_mode=S_IFREG|0644, st_size=815, ...}) = 0 16120 fstat64(4, {st_mode=S_IFREG|0644, st_size=815, ...}) = 0 16120 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000 16120 read(4, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\f\0\0\0\f\0"..., 4096) = 815 16120 close(4) = 0 16120 munmap(0x40017000, 4096) = 0 16120 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=815, ...}) = 0 16120 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=815, ...}) = 0 16120 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=815, ...}) = 0 16120 send(3, "<27>Sep 18 13:27:23 pppd[16120]:"..., 401, MSG_NOSIGNAL) = 401 16120 exit_group(4) = ?