Created
June 8, 2016 15:53
-
-
Save anonymous/5459fa0322d178f85b0cd2d5ee2add53 to your computer and use it in GitHub Desktop.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$ ls | grep a |grep b | grep c | |
++ history_to_syslog | |
++ declare cmd | |
+++ whoami | |
++ who=pgr21 | |
+++ history 1 | |
++ cmd='16612 2016-06-08 15:57:07 ls | grep a |grep b | grep c' | |
+++ tty | |
++ TTY=/dev/pts/0 | |
+++ basename /dev/pts/0 | |
++ HISNAME=0 | |
+++ detecting pts/0 | |
+++ cut -f 2 -d '(' | |
+++ user_who | |
+++ cut -f 1 -d ')' | |
++ ip=141.223.84.43 | |
++ logger -p local7.notice -- IP=141.223.84.43 USER=pgr21, PID=12299, PWD=/home/pgr21, CMD =16612 2016-06-08 15:57:07 ls '|' grep a '|grep' b '|' grep c | |
++ history_to_syslog | |
++ declare cmd | |
+++ whoami | |
+ ls -hF --color=auto | |
++ who=pgr21 | |
+++ history 1 | |
++ cmd='16612 2016-06-08 15:57:07 ls | grep a |grep b | grep c' | |
+++ tty | |
++ TTY=/dev/pts/0 | |
+++ basename /dev/pts/0 | |
-bash: child setpgid (13582 to 13575): Operation not permitted | |
++ HISNAME=0 | |
-bash: child setpgid (13584 to 13575): Operation not permitted | |
+++ user_who | |
-bash: child setpgid (13585 to 13575): Operation not permitted | |
+++ detecting pts/0 | |
-bash: child setpgid (13586 to 13575): Operation not permitted | |
+++ cut -f 2 -d '(' | |
-bash: child setpgid (13587 to 13575): Operation not permitted | |
+++ cut -f 1 -d ')' | |
++ ip=141.223.84.43 | |
++ logger -p local7.notice -- IP=141.223.84.43 USER=pgr21, PID=12299, PWD=/home/pgr21, CMD =16612 2016-06-08 15:57:07 ls '|' grep a '|grep' b '|' grep c | |
++ history_to_syslog | |
++ declare cmd | |
+++ whoami | |
+ grep a | |
++ who=pgr21 | |
+++ history 1 | |
++ cmd='16612 2016-06-08 15:57:07 ls | grep a |grep b | grep c' | |
+++ tty | |
-bash: child setpgid (13594 to 13589): Operation not permitted | |
++ TTY=/dev/pts/0 | |
+++ basename /dev/pts/0 | |
-bash: child setpgid (13596 to 13589): Operation not permitted | |
++ HISNAME=0 | |
-bash: child setpgid (13598 to 13589): Operation not permitted | |
+++ user_who | |
-bash: child setpgid (13599 to 13589): Operation not permitted | |
-bash: child setpgid (13600 to 13589): Operation not permitted | |
+++ cut -f 2 -d '(' | |
-bash: child setpgid (13601 to 13589): Operation not permitted | |
+++ cut -f 1 -d ')' | |
+++ detecting pts/0 | |
++ ip=141.223.84.43 | |
++ logger -p local7.notice -- IP=141.223.84.43 USER=pgr21, PID=12299, PWD=/home/pgr21, CMD =16612 2016-06-08 15:57:07 ls '|' grep a '|grep' b '|' grep c | |
++ history_to_syslog | |
++ declare cmd | |
+++ whoami | |
+ grep b | |
++ who=pgr21 | |
+++ history 1 | |
++ cmd='16612 2016-06-08 15:57:07 ls | grep a |grep b | grep c' | |
+++ tty | |
-bash: child setpgid (13608 to 13603): Operation not permitted | |
++ TTY=/dev/pts/0 | |
+++ basename /dev/pts/0 | |
-bash: child setpgid (13610 to 13603): Operation not permitted | |
++ HISNAME=0 | |
-bash: child setpgid (13612 to 13603): Operation not permitted | |
+++ user_who | |
-bash: child setpgid (13613 to 13603): Operation not permitted | |
-bash: child setpgid (13614 to 13603): Operation not permitted | |
-bash: child setpgid (13615 to 13603): Operation not permitted | |
+++ cut -f 2 -d '(' | |
+++ cut -f 1 -d ')' | |
+++ detecting pts/0 | |
++ ip=141.223.84.43 | |
++ logger -p local7.notice -- IP=141.223.84.43 USER=pgr21, PID=12299, PWD=/home/pgr21, CMD =16612 2016-06-08 15:57:07 ls '|' grep a '|grep' b '|' grep c | |
+ grep c | |
+++ history_to_syslog | |
+++ declare cmd | |
++++ whoami | |
+++ who=pgr21 | |
++++ history 1 | |
+++ cmd='16612 2016-06-08 15:57:07 ls | grep a |grep b | grep c' | |
++++ tty | |
+++ TTY=/dev/pts/0 | |
++++ basename /dev/pts/0 | |
+++ HISNAME=0 | |
++++ detecting pts/0 | |
++++ cut -f 2 -d '(' | |
++++ cut -f 1 -d ')' | |
++++ user_who | |
+++ ip=141.223.84.43 | |
+++ logger -p local7.notice -- IP=141.223.84.43 USER=pgr21, PID=12299, PWD=/home/pgr21, CMD =16612 2016-06-08 15:57:07 ls '|' grep a '|grep' b '|' grep c | |
++ printf '\033]0;%s@%s:%s\007' pgr21 pgr21 '~' |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
env -i ls | grep a | grep b | grep c | grep d | |
-bash: child setpgid (13335 to 13330): Operation not permitted | |
-bash: child setpgid (13337 to 13330): Operation not permitted | |
-bash: child setpgid (13339 to 13330): Operation not permitted | |
# Sometimes no error, sometimes error. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$ trap -p | |
trap -- 'history_to_syslog' DEBUG |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$ type log | |
-bash: type: log: not found |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$ strace ls | grep a | grep b | grep c | grep d | |
execve("/bin/ls", ["ls"], [/* 22 vars */]) = 0 | |
brk(0) = 0x8343000 | |
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory) | |
open("/etc/ld.so.cache", O_RDONLY) = 3 | |
fstat64(3, {st_mode=S_IFREG|0644, st_size=35159, ...}) = 0 | |
mmap2(NULL, 35159, PROT_READ, MAP_PRIVATE, 3, 0) = 0xb7f61000 | |
close(3) = 0 | |
open("/lib/librt.so.1", O_RDONLY) = 3 | |
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200\210\255\0004\0\0\0"..., 512) = 512 | |
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f60000 | |
fstat64(3, {st_mode=S_IFREG|0755, st_size=48156, ...}) = 0 | |
mmap2(0xad7000, 33324, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xad7000 | |
mmap2(0xade000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x7) = 0xade000 | |
close(3) = 0 | |
open("/lib/libacl.so.1", O_RDONLY) = 3 | |
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@\242\254\0004\0\0\0"..., 512) = 512 | |
fstat64(3, {st_mode=S_IFREG|0755, st_size=25660, ...}) = 0 | |
mmap2(0xac9000, 27008, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xac9000 | |
mmap2(0xacf000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x5) = 0xacf000 | |
close(3) = 0 | |
open("/lib/libselinux.so.1", O_RDONLY) = 3 | |
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\240U\256\0004\0\0\0"..., 512) = 512 | |
fstat64(3, {st_mode=S_IFREG|0755, st_size=93508, ...}) = 0 | |
mmap2(0xae2000, 97120, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xae2000 | |
mmap2(0xaf8000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15) = 0xaf8000 | |
close(3) = 0 | |
open("/lib/libc.so.6", O_RDONLY) = 3 | |
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \300\222\0004\0\0\0"..., 512) = 512 | |
fstat64(3, {st_mode=S_IFREG|0755, st_size=1706208, ...}) = 0 | |
mmap2(0x916000, 1422788, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x916000 | |
mmap2(0xa6c000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x156) = 0xa6c000 | |
mmap2(0xa6f000, 9668, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xa6f000 | |
close(3) = 0 | |
open("/lib/libpthread.so.0", O_RDONLY) = 3 | |
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p\370\247\0004\0\0\0"..., 512) = 512 | |
fstat64(3, {st_mode=S_IFREG|0755, st_size=137944, ...}) = 0 | |
mmap2(0xa7b000, 102884, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xa7b000 | |
mmap2(0xa91000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x15) = 0xa91000 | |
mmap2(0xa93000, 4580, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xa93000 | |
close(3) = 0 | |
open("/lib/libattr.so.1", O_RDONLY) = 3 | |
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\200+\254\0004\0\0\0"..., 512) = 512 | |
fstat64(3, {st_mode=S_IFREG|0755, st_size=15780, ...}) = 0 | |
mmap2(0xac2000, 17056, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xac2000 | |
mmap2(0xac6000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3) = 0xac6000 | |
close(3) = 0 | |
open("/lib/libdl.so.2", O_RDONLY) = 3 | |
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0pJ\247\0004\0\0\0"..., 512) = 512 | |
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f5f000 | |
fstat64(3, {st_mode=S_IFREG|0755, st_size=20668, ...}) = 0 | |
mmap2(0xa74000, 16504, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xa74000 | |
mmap2(0xa77000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2) = 0xa77000 | |
close(3) = 0 | |
open("/lib/libsepol.so.1", O_RDONLY) = 3 | |
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@\357\257\0004\0\0\0"..., 512) = 512 | |
fstat64(3, {st_mode=S_IFREG|0755, st_size=245376, ...}) = 0 | |
mmap2(0xafc000, 285024, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xafc000 | |
mmap2(0xb37000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3b) = 0xb37000 | |
mmap2(0xb38000, 39264, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xb38000 | |
close(3) = 0 | |
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f5e000 | |
set_thread_area({entry_number:-1 -> 6, base_addr:0xb7f5e8e0, limit:1048575, seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0, useable:1}) = 0 | |
mprotect(0xade000, 4096, PROT_READ) = 0 | |
mprotect(0xa6c000, 8192, PROT_READ) = 0 | |
mprotect(0xa91000, 4096, PROT_READ) = 0 | |
mprotect(0x912000, 4096, PROT_READ) = 0 | |
mprotect(0xa77000, 4096, PROT_READ) = 0 | |
munmap(0xb7f61000, 35159) = 0 | |
set_tid_address(0xb7f5e928) = 13235 | |
set_robust_list(0xb7f5e930, 0xc) = 0 | |
futex(0xbfcaba94, FUTEX_WAKE_PRIVATE, 1) = 0 | |
rt_sigaction(SIGRTMIN, {0xa7f400, [], SA_SIGINFO}, NULL, 8) = 0 | |
rt_sigaction(SIGRT_1, {0xa7f300, [], SA_RESTART|SA_SIGINFO}, NULL, 8) = 0 | |
rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 | |
getrlimit(RLIMIT_STACK, {rlim_cur=10240*1024, rlim_max=RLIM_INFINITY}) = 0 | |
uname({sys="Linux", node="pgr21.com", ...}) = 0 | |
access("/etc/selinux/", F_OK) = 0 | |
brk(0) = 0x8343000 | |
brk(0x8364000) = 0x8364000 | |
open("/etc/selinux/config", O_RDONLY|O_LARGEFILE) = 3 | |
fstat64(3, {st_mode=S_IFREG|0644, st_size=511, ...}) = 0 | |
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f69000 | |
read(3, "# This file controls the state o"..., 4096) = 511 | |
read(3, "", 4096) = 0 | |
close(3) = 0 | |
munmap(0xb7f69000, 4096) = 0 | |
open("/proc/mounts", O_RDONLY|O_LARGEFILE) = 3 | |
fstat64(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0 | |
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f69000 | |
read(3, "rootfs / rootfs rw 0 0\n/dev/root"..., 1024) = 820 | |
read(3, "", 1024) = 0 | |
close(3) = 0 | |
munmap(0xb7f69000, 4096) = 0 | |
ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbfcab908) = -1 EINVAL (Invalid argument) | |
ioctl(1, TIOCGWINSZ, 0xbfcaba04) = -1 EINVAL (Invalid argument) | |
open(".", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 3 | |
fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 | |
getdents64(3, /* 37 entries */, 32768) = 1144 | |
getdents64(3, /* 0 entries */, 32768) = 0 | |
close(3) = 0 | |
fstat64(1, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 | |
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xb7f69000 | |
write(1, "2015-08-26_pgr21_db\netc\nhtml\nkon"..., 109) = 109 | |
close(1) = 0 | |
munmap(0xb7f69000, 4096) = 0 | |
exit_group(0) = ? | |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
$ ulimit -a | |
core file size (blocks, -c) 0 | |
data seg size (kbytes, -d) unlimited | |
scheduling priority (-e) 0 | |
file size (blocks, -f) unlimited | |
pending signals (-i) 129094 | |
max locked memory (kbytes, -l) 32 | |
max memory size (kbytes, -m) unlimited | |
open files (-n) 1024 | |
pipe size (512 bytes, -p) 8 | |
POSIX message queues (bytes, -q) 819200 | |
real-time priority (-r) 0 | |
stack size (kbytes, -s) 10240 | |
cpu time (seconds, -t) unlimited | |
max user processes (-u) 129094 | |
virtual memory (kbytes, -v) unlimited | |
file locks (-x) unlimited |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment