execve("/usr/sbin/pppd", ["pppd", "eth0"], [/* 33 vars */]) = 0
brk(0)                                  = 0x807db38
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40016000
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=19860, ...}) = 0
old_mmap(NULL, 19860, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40017000
close(3)                                = 0
open("/lib/libcrypt.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\20\23\0"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=80453, ...}) = 0
old_mmap(NULL, 184764, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4001c000
mprotect(0x40021000, 164284, PROT_NONE) = 0
old_mmap(0x40021000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x4000) = 0x40021000
old_mmap(0x40023000, 156092, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40023000
close(3)                                = 0
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\364\36"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=72701, ...}) = 0
old_mmap(NULL, 13296, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4004a000
mprotect(0x4004d000, 1008, PROT_NONE)   = 0
old_mmap(0x4004d000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x2000) = 0x4004d000
close(3)                                = 0
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\270\323"..., 1024) = 1024
fstat64(3, {st_mode=S_IFREG|0755, st_size=4787276, ...}) = 0
old_mmap(NULL, 1120708, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4004e000
mprotect(0x40155000, 43460, PROT_NONE)  = 0
old_mmap(0x40155000, 28672, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x106000) = 0x40155000
old_mmap(0x4015c000, 14788, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x4015c000
close(3)                                = 0
munmap(0x40017000, 19860)               = 0
getpid()                                = 590
open("/dev/null", O_RDWR)               = 3
close(3)                                = 0
socket(PF_UNIX, SOCK_DGRAM, 0)          = 3
fcntl64(3, F_SETFD, FD_CLOEXEC)         = 0
connect(3, {sin_family=AF_UNIX, path="/dev/log"}, 16) = 0
uname({sys="Linux", node="spot", ...})  = 0
umask(0777)                             = 022
umask(022)                              = 0777
getuid32()                              = 0
brk(0)                                  = 0x807db38
brk(0x807db58)                          = 0x807db58
brk(0x807e000)                          = 0x807e000
getgroups32(0x20, 0x80796a0)            = 8
gettimeofday({1070208681, 836711}, NULL) = 0
getpid()                                = 590
open("/etc/ppp/options", O_RDONLY)      = 4
fstat64(4, {st_mode=S_IFREG|0640, st_size=285, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000
read(4, "plugin /usr/lib/pppd/2.4.1/pppoe"..., 4096) = 285
open("/usr/lib/pppd/2.4.1/pppoe.so", O_RDONLY) = 5
read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \32\0\000"..., 1024) = 1024
fstat64(5, {st_mode=S_IFREG|0755, st_size=119707, ...}) = 0
old_mmap(NULL, 37920, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x40160000
mprotect(0x40167000, 9248, PROT_NONE)   = 0
old_mmap(0x40167000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 5, 0x6000) = 0x40167000
old_mmap(0x40169000, 1056, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40169000
close(5)                                = 0
brk(0x807f000)                          = 0x807f000
brk(0x8082000)                          = 0x8082000
time([1070208681])                      = 1070208681
open("/etc/localtime", O_RDONLY)        = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=837, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40018000
read(5, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10"..., 4096) = 837
close(5)                                = 0
munmap(0x40018000, 4096)                = 0
getpid()                                = 590
rt_sigaction(SIGPIPE, {0x40116638, [], 0x4000000}, {SIG_DFL}, 8) = 0
send(3, "<30>Nov 30 17:11:21 pppd[590]: P"..., 74, 0) = 74
rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
write(1, "Plugin /usr/lib/pppd/2.4.1/pppoe"..., 43Plugin /usr/lib/pppd/2.4.1/pppoe.so loaded.) = 43
write(1, "\n", 1
)                       = 1
uname({sys="Linux", node="spot", ...})  = 0
open("/dev/ppp", O_RDWR)                = 5
close(5)                                = 0
time([1070208713])                      = 1070208713
getpid()                                = 590
rt_sigaction(SIGPIPE, {0x40116638, [], 0x4000000}, {SIG_DFL}, 8) = 0
send(3, "<30>Nov 30 17:11:53 pppd[590]: P"..., 55, 0) = 55
rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
write(1, "PPPoE Plugin Initialized", 24PPPoE Plugin Initialized) = 24
write(1, "\n", 1
)                       = 1
read(4, "", 4096)                       = 0
close(4)                                = 0
munmap(0x40017000, 4096)                = 0
getuid32()                              = 0
socket(PF_UNIX, SOCK_STREAM, 0)         = 4
connect(4, {sin_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = -1 ENOENT (No such file or directory)
close(4)                                = 0
open("/etc/nsswitch.conf", O_RDONLY)    = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=1121, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000
read(4, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1121
read(4, "", 4096)                       = 0
close(4)                                = 0
munmap(0x40017000, 4096)                = 0
open("/etc/ld.so.cache", O_RDONLY)      = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=19860, ...}) = 0
old_mmap(NULL, 19860, PROT_READ, MAP_PRIVATE, 4, 0) = 0x40017000
close(4)                                = 0
open("/lib/libnss_files.so.2", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\360$\0"..., 1024) = 1024
fstat64(4, {st_mode=S_IFREG|0755, st_size=238649, ...}) = 0
old_mmap(NULL, 38224, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x4016a000
mprotect(0x40173000, 1360, PROT_NONE)   = 0
old_mmap(0x40173000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x8000) = 0x40173000
close(4)                                = 0
munmap(0x40017000, 19860)               = 0
open("/etc/passwd", O_RDONLY)           = 4
fcntl64(4, F_GETFD)                     = 0
fcntl64(4, F_SETFD, FD_CLOEXEC)         = 0
fstat64(4, {st_mode=S_IFREG|0644, st_size=1476, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000
read(4, "root:x:0:0:BOFH,666,0-800-DEV-NU"..., 4096) = 1476
close(4)                                = 0
munmap(0x40017000, 4096)                = 0
getuid32()                              = 0
setresuid32(0xffffffff, 0, 0xffffffff)  = 0
open("/root/.ppprc", O_RDONLY)          = -1 ENOENT (No such file or directory)
setresuid32(0xffffffff, 0, 0xffffffff)  = 0
socket(PF_PACKET, SOCK_DGRAM, 0)        = 4
ioctl(4, 0x8933, 0xbffff95c)            = 0
ioctl(4, 0x8927, 0xbffff95c)            = 0
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff87c)            = -1 ENODEV (No such device)
ioctl(4, 0x8933, 0xbffff97c)            = 0
ioctl(4, 0x8927, 0xbffff97c)            = 0
open("/etc/ppp/options.eth0", O_RDONLY) = -1 ENOENT (No such file or directory)
geteuid32()                             = 0
uname({sys="Linux", node="spot", ...})  = 0
open("/dev/ppp", O_RDWR)                = 5
close(5)                                = 0
open("/dev/ppp", O_RDWR)                = 5
fcntl64(5, F_GETFL)                     = 0x2 (flags O_RDWR)
fcntl64(5, F_SETFL, O_RDWR|O_NONBLOCK)  = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 6
open("/var/run/pppd.tdb", O_RDWR|O_CREAT, 0644) = 7
fcntl64(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=0, len=1}) = 0
fcntl64(7, F_SETLKW, {type=F_RDLCK, whence=SEEK_SET, start=4, len=1}) = 0
read(7, "TDB file\n\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 40) = 40
fstat64(7, {st_mode=S_IFREG|0644, st_size=57344, ...}) = 0
old_mmap(NULL, 57344, PROT_READ|PROT_WRITE, MAP_SHARED, 7, 0) = 0x40174000
fcntl64(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=0, len=1}) = 0
getpid()                                = 590
fcntl64(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=1224, len=1}) = 0
fcntl64(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=1224, len=1}) = 0
fcntl64(7, F_SETLKW, {type=F_WRLCK, whence=SEEK_SET, start=1020, len=1}) = 0
fcntl64(7, F_SETLKW, {type=F_UNLCK, whence=SEEK_SET, start=1020, len=1}) = 0
brk(0x8085000)                          = 0x8085000
time([1070208743])                      = 1070208743
getpid()                                = 590
rt_sigaction(SIGPIPE, {0x40116638, [], 0x4000000}, {SIG_DFL}, 8) = 0
send(3, "<27>Nov 30 17:12:23 pppd[590]: t"..., 56, 0) = 56
rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
write(1, "tdb_store failed: Success", 25tdb_store failed: Success) = 25
write(1, "\n", 1
)                       = 1
fork()                                  = 591
_exit(0)                                = ?