execve("/bin/ps", ["ps", "-ef"], [/* 17 vars */]) = 0 brk(0) = 0x9fdf000 uname({sys="Linux", node="testwww", ...}) = 0 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=15658, ...}) = 0 mmap2(NULL, 15658, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7f99000 close(3) = 0 open("/lib/libproc-3.2.7.so", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300#\0\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=52428, ...}) = 0 mmap2(NULL, 129144, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x34e000 mmap2(0x35a000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xc) = 0x35a000 mmap2(0x35b000, 75896, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x35b000 close(3) = 0 open("/lib/libdl.so.2", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\n\0\0004\0\0\0"..., 512) = 512 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f98000 fstat64(3, {st_mode=S_IFREG|0755, st_size=18672, ...}) = 0 mmap2(NULL, 16504, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x8f1000 mmap2(0x8f4000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2) = 0x8f4000 close(3) = 0 open("/lib/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\360d\1\0004\0\0\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1689108, ...}) = 0 mmap2(NULL, 1410608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xc76000 mmap2(0xdc9000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x153) = 0xdc9000 mmap2(0xdcc000, 9776, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xdcc000 close(3) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f97000 set_thread_area({entry_number:-1 -> 6, base_addr:0xb7f976c0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 mprotect(0xdc9000, 8192, PROT_READ) = 0 mprotect(0x8f4000, 4096, PROT_READ) = 0 mprotect(0x681000, 4096, PROT_READ) = 0 munmap(0xb7f99000, 15658) = 0 uname({sys="Linux", node="testwww", ...}) = 0 brk(0) = 0x9fdf000 brk(0xa000000) = 0xa000000 open("/proc/stat", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9c000 read(3, "cpu 701 0 104 29166 211 0 0 0\nc"..., 4096) = 184 read(3, "", 4096) = 0 close(3) = 0 munmap(0xb7f9c000, 4096) = 0 rt_sigaction(SIGSYS, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGPWR, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGIO, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGVTALRM, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGXFSZ, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGXCPU, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGURG, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGTTIN, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGCONT, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGCHLD, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGSTKFLT, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGTERM, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGALRM, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGPIPE, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGUSR2, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGSEGV, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGUSR1, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGFPE, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGBUS, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGABRT, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGTRAP, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGILL, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 rt_sigaction(SIGHUP, {0x8049fa0, ~[RTMIN RT_1], SA_RESTORER, 0xc9f738}, NULL, 8) = 0 open("/proc/self/stat", O_RDONLY) = 3 read(3, "9256 (ps) R 9255 9255 8148 34816"..., 1023) = 226 close(3) = 0 ioctl(1, TIOCGWINSZ, {ws_row=26, ws_col=80, ws_xpixel=0, ws_ypixel=0}) = 0 ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 open("/proc/stat", O_RDONLY) = 3 read(3, "cpu 701 0 105 29166 211 0 0 0\nc"..., 65535) = 184 time(NULL) = 1204297570 close(3) = 0 geteuid32() = 0 open("/proc/sys/kernel/pid_max", O_RDONLY) = 3 read(3, "32768\n", 24) = 6 close(3) = 0 mmap2(NULL, 139264, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f75000 mprotect(0xb7f96000, 4096, PROT_NONE) = 0 time(NULL) = 1204297570 open("/proc/meminfo", O_RDONLY) = 3 lseek(3, 0, SEEK_SET) = 0 read(3, "MemTotal: 514668 kB\nMemFre"..., 1023) = 771 stat64("/proc/self/task", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|0x80000) = 4 fstat64(4, {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 fcntl64(4, F_GETFD) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 getdents(4, /* 35 entries */, 4096) = 628 stat64("/proc/1", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/1/stat", O_RDONLY) = 5 read(5, "1 (init) S 0 1 1 0 -1 4194560 25"..., 1023) = 214 close(5) = 0 open("/proc/1/status", O_RDONLY) = 5 read(5, "Name:\tinit\nState:\tS (sleeping)\nS"..., 1023) = 762 close(5) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 5 fcntl64(5, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(5, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(5) = 0 socket(PF_FILE, SOCK_STREAM, 0) = 5 fcntl64(5, F_SETFL, O_RDWR|O_NONBLOCK) = 0 connect(5, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory) close(5) = 0 open("/etc/nsswitch.conf", O_RDONLY) = 5 fstat64(5, {st_mode=S_IFREG|0644, st_size=1696, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9c000 read(5, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1696 read(5, "", 4096) = 0 close(5) = 0 munmap(0xb7f9c000, 4096) = 0 open("/etc/ld.so.cache", O_RDONLY) = 5 fstat64(5, {st_mode=S_IFREG|0644, st_size=15658, ...}) = 0 mmap2(NULL, 15658, PROT_READ, MAP_PRIVATE, 5, 0) = 0xb7f99000 close(5) = 0 open("/lib/libnss_files.so.2", O_RDONLY) = 5 read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\30\0\0004\0\0\0"..., 512) = 512 fstat64(5, {st_mode=S_IFREG|0755, st_size=50768, ...}) = 0 mmap2(NULL, 45712, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 5, 0) = 0x110000 mmap2(0x11a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 5, 0x9) = 0x11a000 close(5) = 0 mprotect(0x11a000, 4096, PROT_READ) = 0 munmap(0xb7f99000, 15658) = 0 open("/etc/passwd", O_RDONLY|0x80000 /* O_??? */) = 5 fcntl64(5, F_GETFD) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 fstat64(5, {st_mode=S_IFREG|0644, st_size=1135, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9c000 read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1135 close(5) = 0 munmap(0xb7f9c000, 4096) = 0 open("/proc/1/cmdline", O_RDONLY) = 5 read(5, "init [3]\0\0\0\0 \0", 2047) = 15 close(5) = 0 fstat64(1, {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9c000 write(1, "UID PID PPID C STIME TT"..., 52) = 52 open("/etc/localtime", O_RDONLY) = 5 fstat64(5, {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 fstat64(5, {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9b000 read(5, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\0"..., 4096) = 2294 _llseek(5, -24, [2270], SEEK_CUR) = 0 read(5, "\nEST5EDT,M3.2.0,M11.1.0\n", 4096) = 24 close(5) = 0 munmap(0xb7f9b000, 4096) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "root 1 0 0 Feb27 ? "..., 63) = 63 stat64("/proc/8064", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8064/stat", O_RDONLY) = 5 read(5, "8064 (rpcbind) S 1 8064 8064 0 -"..., 1023) = 209 close(5) = 0 open("/proc/8064/status", O_RDONLY) = 5 read(5, "Name:\trpcbind\nState:\tS (sleeping"..., 1023) = 778 close(5) = 0 open("/etc/passwd", O_RDONLY|0x80000 /* O_??? */) = 5 fcntl64(5, F_GETFD) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 fstat64(5, {st_mode=S_IFREG|0644, st_size=1135, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9b000 read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1135 close(5) = 0 munmap(0xb7f9b000, 4096) = 0 open("/proc/8064/cmdline", O_RDONLY) = 5 read(5, "rpcbind\0", 2047) = 8 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "rpc 8064 1 0 Feb27 ? "..., 56) = 56 stat64("/proc/8072", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8072/stat", O_RDONLY) = 5 read(5, "8072 (rsyslogd) S 1 8067 7842 0 "..., 1023) = 228 close(5) = 0 open("/proc/8072/status", O_RDONLY) = 5 read(5, "Name:\trsyslogd\nState:\tS (sleepin"..., 1023) = 775 close(5) = 0 open("/proc/8072/cmdline", O_RDONLY) = 5 read(5, "rsyslogd\0-m\0000\0", 2047) = 14 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "root 8072 1 0 Feb27 ? "..., 62) = 62 stat64("/proc/8076", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8076/stat", O_RDONLY) = 5 read(5, "8076 (rklogd) S 1 8076 8076 0 -1"..., 1023) = 228 close(5) = 0 open("/proc/8076/status", O_RDONLY) = 5 read(5, "Name:\trklogd\nState:\tS (sleeping)"..., 1023) = 772 close(5) = 0 open("/proc/8076/cmdline", O_RDONLY) = 5 read(5, "rklogd\0-x\0", 2047) = 10 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "root 8076 1 0 Feb27 ? "..., 58) = 58 stat64("/proc/8086", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8086/stat", O_RDONLY) = 5 read(5, "8086 (sshd) S 1 8086 8086 0 -1 4"..., 1023) = 206 close(5) = 0 open("/proc/8086/status", O_RDONLY) = 5 read(5, "Name:\tsshd\nState:\tS (sleeping)\nS"..., 1023) = 771 close(5) = 0 open("/proc/8086/cmdline", O_RDONLY) = 5 read(5, "/usr/sbin/sshd\0", 2047) = 15 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "root 8086 1 0 Feb27 ? "..., 63) = 63 stat64("/proc/8095", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8095/stat", O_RDONLY) = 5 read(5, "8095 (xinetd) S 1 8095 8095 0 -1"..., 1023) = 218 close(5) = 0 open("/proc/8095/status", O_RDONLY) = 5 read(5, "Name:\txinetd\nState:\tS (sleeping)"..., 1023) = 773 close(5) = 0 open("/proc/8095/cmdline", O_RDONLY) = 5 read(5, "xinetd\0-stayalive\0-pidfile\0/var/"..., 2047) = 47 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "root 8095 1 0 Feb27 ? "..., 81) = 81 stat64("/proc/8115", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8115/stat", O_RDONLY) = 5 read(5, "8115 (sendmail) S 1 8115 8115 0 "..., 1023) = 211 close(5) = 0 open("/proc/8115/status", O_RDONLY) = 5 read(5, "Name:\tsendmail\nState:\tS (sleepin"..., 1023) = 781 close(5) = 0 open("/proc/8115/cmdline", O_RDONLY) = 5 read(5, "sendmail: accepting connections", 2047) = 31 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "root 8115 1 0 Feb27 ? "..., 80) = 80 stat64("/proc/8123", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8123/stat", O_RDONLY) = 5 read(5, "8123 (sendmail) S 1 8123 8123 0 "..., 1023) = 221 close(5) = 0 open("/proc/8123/status", O_RDONLY) = 5 read(5, "Name:\tsendmail\nState:\tS (sleepin"..., 1023) = 786 close(5) = 0 open("/etc/passwd", O_RDONLY|0x80000 /* O_??? */) = 5 fcntl64(5, F_GETFD) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 fstat64(5, {st_mode=S_IFREG|0644, st_size=1135, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f9b000 read(5, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1135 close(5) = 0 munmap(0xb7f9b000, 4096) = 0 open("/proc/8123/cmdline", O_RDONLY) = 5 read(5, "sendmail: Queue runner@01:00:00 "..., 2047) = 59 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "smmsp 8123 1 0 Feb27 ? "..., 81) = 81 stat64("/proc/8138", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8138/stat", O_RDONLY) = 5 read(5, "8138 (crond) S 1 8138 8138 0 -1 "..., 1023) = 207 close(5) = 0 open("/proc/8138/status", O_RDONLY) = 5 read(5, "Name:\tcrond\nState:\tS (sleeping)\n"..., 1023) = 772 close(5) = 0 open("/proc/8138/cmdline", O_RDONLY) = 5 read(5, "crond\0", 2047) = 6 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "root 8138 1 0 Feb27 ? "..., 54) = 54 stat64("/proc/8147", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8147/stat", O_RDONLY) = 5 read(5, "8147 (vzctl) S 1 8147 8147 0 -1 "..., 1023) = 205 close(5) = 0 open("/proc/8147/status", O_RDONLY) = 5 read(5, "Name:\tvzctl\nState:\tS (sleeping)\n"..., 1023) = 772 close(5) = 0 open("/proc/8147/cmdline", O_RDONLY) = 5 read(5, "vzctl: pts/0\0\0\0\0\0", 2047) = 17 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 write(1, "root 8147 1 0 Feb27 ? "..., 65) = 65 stat64("/proc/8148", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/8148/stat", O_RDONLY) = 5 read(5, "8148 (bash) S 8147 8148 8148 348"..., 1023) = 247 close(5) = 0 open("/proc/8148/status", O_RDONLY) = 5 read(5, "Name:\tbash\nState:\tS (sleeping)\nS"..., 1023) = 775 close(5) = 0 open("/proc/8148/cmdline", O_RDONLY) = 5 read(5, "-bash\0", 2047) = 6 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 open("/proc/tty/drivers", O_RDONLY) = -1 ENOENT (No such file or directory) readlink("/proc/8148/fd/2", "/dev/pts/0", 127) = 10 stat64("/dev/pts/0", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0 write(1, "root 8148 8147 0 Feb27 pt"..., 54) = 54 stat64("/proc/9255", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/9255/stat", O_RDONLY) = 5 read(5, "9255 (strace) S 8148 9255 8148 3"..., 1023) = 231 close(5) = 0 open("/proc/9255/status", O_RDONLY) = 5 read(5, "Name:\tstrace\nState:\tS (sleeping)"..., 1023) = 777 close(5) = 0 open("/proc/9255/cmdline", O_RDONLY) = 5 read(5, "strace\0-o\0output.txt\0ps\0-ef\0", 2047) = 28 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 readlink("/proc/9255/fd/2", "/dev/pts/0", 127) = 10 stat64("/dev/pts/0", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0 write(1, "root 9255 8148 0 Feb27 pt"..., 76) = 76 stat64("/proc/9256", {st_mode=S_IFDIR|0555, st_size=0, ...}) = 0 open("/proc/9256/stat", O_RDONLY) = 5 read(5, "9256 (ps) R 9255 9255 8148 34816"..., 1023) = 226 close(5) = 0 open("/proc/9256/status", O_RDONLY) = 5 read(5, "Name:\tps\nState:\tR (running)\nSlee"..., 1023) = 774 close(5) = 0 open("/proc/9256/cmdline", O_RDONLY) = 5 read(5, "ps\0-ef\0", 2047) = 7 close(5) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 stat64("/etc/localtime", {st_mode=S_IFREG|0644, st_size=2294, ...}) = 0 readlink("/proc/9256/fd/2", "/dev/pts/0", 127) = 10 stat64("/dev/pts/0", {st_mode=S_IFCHR|0600, st_rdev=makedev(136, 0), ...}) = 0 write(1, "root 9256 9255 0 Feb27 pt"..., 55) = 55 getdents(4, /* 0 entries */, 4096) = 0 close(4) = 0 exit_group(0) = ?