Skip to content

Instantly share code, notes, and snippets.

@lwhsu
Created January 21, 2018 07:03
Show Gist options
  • Save lwhsu/b2048789726f674681e7646603d2bd75 to your computer and use it in GitHub Desktop.
Save lwhsu/b2048789726f674681e7646603d2bd75 to your computer and use it in GitHub Desktop.
723 ktrace RET ktrace 0
723 ktrace CALL execve(0x7fffffffee33,0x7fffffffec00,0x7fffffffec10)
723 ktrace NAMI "./a.out.32"
723 ktrace NAMI "/libexec/ld-elf32.so.1"
723 a.out.32 RET execve 0
723 a.out.32 CALL mmap(0,0x8000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0,0)
723 a.out.32 RET mmap 671506432/0x28066000
723 a.out.32 CALL issetugid
723 a.out.32 RET issetugid 0
723 a.out.32 CALL lstat(0x2806b000,0xffffc638)
723 a.out.32 NAMI "/etc"
723 a.out.32 STRU struct stat {dev=65, ino=561792, mode=040755, nlink=27, uid=0, gid=0, rdev=1127016, atime=1516112984, mtime=1516134260.165213000, ctime=1516134260.165213000, birthtime=1500603066, size=2560, blksize=32768, blocks=8, flags=0x0 }
723 a.out.32 RET lstat 0
723 a.out.32 CALL lstat(0x2806b000,0xffffc638)
723 a.out.32 NAMI "/etc/libmap32.conf"
723 a.out.32 RET lstat -1 errno 2 No such file or directory
723 a.out.32 CALL openat(AT_FDCWD,0x28060bb5,0x100000<O_RDONLY|O_CLOEXEC>)
723 a.out.32 NAMI "/var/run/ld-elf32.so.hints"
723 a.out.32 RET openat 3
723 a.out.32 CALL read(0x3,0x280652d0,0x80)
723 a.out.32 GIO fd 3 read 128 bytes
0x0000 4568 6e74 0100 0000 8000 0000 0b00 0000 |Ehnt............|
0x0010 0000 0000 0a00 0000 0000 0000 0000 0000 |................|
0x0020 0000 0000 0000 0000 0000 0000 0000 0000 |................|
0x0030 0000 0000 0000 0000 0000 0000 0000 0000 |................|
0x0040 0000 0000 0000 0000 0000 0000 0000 0000 |................|
0x0050 0000 0000 0000 0000 0000 0000 0000 0000 |................|
0x0060 0000 0000 0000 0000 0000 0000 0000 0000 |................|
0x0070 0000 0000 0000 0000 0000 0000 0000 0000 |................|
723 a.out.32 RET read 128/0x80
723 a.out.32 CALL fstat(0x3,0xffffcc30)
723 a.out.32 STRU struct stat {dev=65, ino=1371347, mode=0100444, nlink=1, uid=0, gid=0, rdev=2761914, atime=1516482739.042175000, mtime=1516480859.765418000, ctime=1516480859.765450000, birthtime=1516480859.765359000, size=139, blksize=32768, blocks=8, flags=0x0 }
723 a.out.32 RET fstat 0
723 a.out.32 CALL lseek(0x3,0x80,SEEK_SET)
723 a.out.32 RET lseek 128/0x80
723 a.out.32 CALL read(0x3,0x2806a010,0xb)
723 a.out.32 GIO fd 3 read 11 bytes
"/usr/lib32\0"
723 a.out.32 RET read 11/0xb
723 a.out.32 CALL close(0x3)
723 a.out.32 RET close 0
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/usr/lib32/libc.so.7"
723 a.out.32 RET access 0
723 a.out.32 CALL openat(AT_FDCWD,0x28067020,0x300000<O_RDONLY|O_CLOEXEC|O_VERIFY>)
723 a.out.32 NAMI "/usr/lib32/libc.so.7"
723 a.out.32 RET openat 3
723 a.out.32 CALL fstat(0x3,0xffffd0f0)
723 a.out.32 STRU struct stat {dev=65, ino=1207797, mode=0100444, nlink=1, uid=0, gid=0, rdev=2428384, atime=1516482667.814304000, mtime=1500603068.422368000, ctime=1516480083.840423000, birthtime=1500603068.422368000, size=1446544, blksize=32768, blocks=2944, flags=0x20000 }
723 a.out.32 RET fstat 0
723 a.out.32 CALL mmap(0,0x1000,0x1<PROT_READ>,0x40002<MAP_PRIVATE|MAP_PREFAULT_READ>,0x3,0,0)
723 a.out.32 RET mmap 671539200/0x2806e000
723 a.out.32 CALL mmap(0,0x167000,0<PROT_NONE>,0x21002<MAP_PRIVATE|MAP_ANON|MAP_NOCORE>,0xffffffff,0,0)
723 a.out.32 RET mmap 671543296/0x2806f000
723 a.out.32 CALL mmap(0x2806f000,0x14b000,0x5<PROT_READ|PROT_EXEC>,0x60012<MAP_PRIVATE|MAP_FIXED|MAP_NOCORE|MAP_PREFAULT_READ>,0x3,0,0)
723 a.out.32 RET mmap 671543296/0x2806f000
723 a.out.32 CALL mmap(0x281ba000,0x7000,0x3<PROT_READ|PROT_WRITE>,0x40012<MAP_PRIVATE|MAP_FIXED|MAP_PREFAULT_READ>,0x3,0x14a000,0)
723 a.out.32 RET mmap 672899072/0x281ba000
723 a.out.32 CALL mmap(0x281c1000,0x15000,0x3<PROT_READ|PROT_WRITE>,0x1012<MAP_PRIVATE|MAP_FIXED|MAP_ANON>,0xffffffff,0,0)
723 a.out.32 RET mmap 672927744/0x281c1000
723 a.out.32 CALL munmap(0x2806e000,0x1000)
723 a.out.32 RET munmap 0
723 a.out.32 CALL close(0x3)
723 a.out.32 RET close 0
723 a.out.32 CALL mmap(0,0x11000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0,0)
723 a.out.32 RET mmap 673013760/0x281d6000
723 a.out.32 CALL sysarch(0xa,0xffffd324)
723 a.out.32 RET sysarch 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffd300)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL readlink(0x281aeb98,0xffffca9b,0x400)
723 a.out.32 NAMI "/etc/malloc.conf"
723 a.out.32 RET readlink -1 errno 2 No such file or directory
723 a.out.32 CALL issetugid
723 a.out.32 RET issetugid 0
723 a.out.32 CALL __sysctl(0xffffc994,0x2,0xffffc9c4,0xffffc9c0,0x281adca3,0xd)
723 a.out.32 SCTL "sysctl.name2oid"
723 a.out.32 RET __sysctl 0
723 a.out.32 CALL __sysctl(0xffffc9c4,0x2,0xffffca5c,0xffffca58,0,0)
723 a.out.32 SCTL "vm.overcommit"
723 a.out.32 RET __sysctl 0
723 a.out.32 CALL mmap(0,0x200000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0,0)
723 a.out.32 RET mmap 673083392/0x281e7000
723 a.out.32 CALL munmap(0x281e7000,0x200000)
723 a.out.32 RET munmap 0
723 a.out.32 CALL mmap(0,0x3ff000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0,0)
723 a.out.32 RET mmap 673083392/0x281e7000
723 a.out.32 CALL munmap(0x281e7000,0x19000)
723 a.out.32 RET munmap 0
723 a.out.32 CALL munmap(0x28400000,0x1e6000)
723 a.out.32 RET munmap 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffcea8)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffcea8)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL mmap(0,0x200000,0x3<PROT_READ|PROT_WRITE>,0x1002<MAP_PRIVATE|MAP_ANON>,0xffffffff,0,0)
723 a.out.32 RET mmap 675282944/0x28400000
723 a.out.32 CALL stat(0x281b6b50,0xffffd7b0)
723 a.out.32 NAMI "/etc/nsswitch.conf"
723 a.out.32 STRU struct stat {dev=65, ino=561805, mode=0100644, nlink=1, uid=0, gid=0, rdev=1133431, atime=1516482734.167774000, mtime=1500603066, ctime=1516112996.531163000, birthtime=1500603066, size=338, blksize=32768, blocks=8, flags=0x0 }
723 a.out.32 RET stat 0
723 a.out.32 CALL open(0x281b6b50,0x100000<O_RDONLY|O_CLOEXEC>)
723 a.out.32 NAMI "/etc/nsswitch.conf"
723 a.out.32 RET open 3
723 a.out.32 CALL ioctl(0x3,TIOCGETA,0xffffd690)
723 a.out.32 RET ioctl -1 errno 25 Inappropriate ioctl for device
723 a.out.32 CALL fstat(0x3,0xffffd610)
723 a.out.32 STRU struct stat {dev=65, ino=561805, mode=0100644, nlink=1, uid=0, gid=0, rdev=1133431, atime=1516482734.167774000, mtime=1500603066, ctime=1516112996.531163000, birthtime=1500603066, size=338, blksize=32768, blocks=8, flags=0x0 }
723 a.out.32 RET fstat 0
723 a.out.32 CALL read(0x3,0x284275c0,0x8000)
723 a.out.32 GIO fd 3 read 338 bytes
"#
# nsswitch.conf(5) - name service switch configuration file
# $FreeBSD: releng/11.1/etc/nsswitch.conf 301711 2016-06-09 01:28:44Z \
markj $
#
group: compat
group_compat: nis
hosts: files dns
netgroup: compat
networks: files
passwd: compat
passwd_compat: nis
shells: files
services: compat
services_compat: nis
protocols: files
rpc: files
"
723 a.out.32 RET read 338/0x152
723 a.out.32 CALL read(0x3,0x284275c0,0x8000)
723 a.out.32 GIO fd 3 read 0 bytes
""
723 a.out.32 RET read 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffc978)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/usr/lib32/nss_compat.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/lib32/nss_compat.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/usr/lib32/nss_compat.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffc978)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/usr/lib32/nss_nis.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/lib32/nss_nis.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/usr/lib32/nss_nis.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffc978)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/usr/lib32/nss_files.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/lib32/nss_files.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/usr/lib32/nss_files.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffc978)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/usr/lib32/nss_dns.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/lib32/nss_dns.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL access(0x2806b000,0<F_OK>)
723 a.out.32 NAMI "/usr/lib32/nss_dns.so.1"
723 a.out.32 RET access -1 errno 2 No such file or directory
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL ioctl(0x3,TIOCGETA,0xffffd678)
723 a.out.32 RET ioctl -1 errno 25 Inappropriate ioctl for device
723 a.out.32 CALL close(0x3)
723 a.out.32 RET close 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffce10)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffd6d0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL open(0x281b3bc3,0x100000<O_RDONLY|O_CLOEXEC>)
723 a.out.32 NAMI "/etc/services"
723 a.out.32 RET open 3
723 a.out.32 CALL fstat(0x3,0xffffd588)
723 a.out.32 STRU struct stat {dev=65, ino=561888, mode=0100644, nlink=1, uid=0, gid=0, rdev=1133576, atime=1516482734.428790000, mtime=1500603066, ctime=1516112996.545966000, birthtime=1500603066, size=86246, blksize=32768, blocks=176, flags=0x0 }
723 a.out.32 RET fstat 0
723 a.out.32 CALL lseek(0x3,0,SEEK_CUR)
723 a.out.32 RET lseek 0
723 a.out.32 CALL lseek(0x3,0,SEEK_SET)
723 a.out.32 RET lseek 0
723 a.out.32 CALL read(0x3,0x284275c0,0x8000)
723 a.out.32 GIO fd 3 read 4096 bytes
"#
# Network services, Internet style
#
# Note that it is presently the policy of IANA to assign a single well\
-known
# port number for both TCP and UDP; hence, most entries here have two \
entries
# even if the protocol doesn't support UDP operations.
#
# The latest IANA port assignments can be gotten from
#
# http://www.iana.org/assignments/port-numbers
#
# The Well Known Ports are those from 0 through 1023.
# The Registered Ports are those from 1024 through 49151
# The Dynamic and/or Private Ports are those from 49152 through 65535
#
# Kerberos services are for Kerberos v4, and are unofficial. Sites ru\
nning
# v5 should uncomment v5 entries and comment v4 entries.
#
# $FreeBSD: releng/11.1/etc/services 292694 2015-12-24 16:35:28Z jlh $
# From: @(#)services 5.8 (Berkeley) 5/9/91
#
# WELL KNOWN PORT NUMBERS
#
rtmp 1/ddp #Routing Table Maintenance Protocol
tcpmux 1/tcp #TCP Port Service Multiplexer
tcpmux 1/udp #TCP Port Service Multiplexer
nbp 2/ddp #Name Binding Protocol
compressnet 2/tcp #Management Utility
compressnet 2/udp #Management Utility
compressnet 3/tcp #Compression Process
compressnet 3/udp #Compression Process
echo 4/ddp #AppleTalk Echo Protocol
rje 5/tcp #Remote Job Entry
rje 5/udp #Remote Job Entry
zip 6/ddp #Zone Information Protocol
echo 7/sctp
echo 7/tcp
echo 7/udp
discard 9/sctp sink null
discard 9/tcp sink null
discard 9/udp sink null
systat 11/tcp users #Active Users
systat 11/udp users #Active Users
daytime 13/sctp
daytime 13/tcp
daytime 13/udp
qotd 17/tcp quote #Quote of the Day
qotd 17/udp quote #Quote of the Day
msp 18/tcp #Message Send Protocol
msp 18/udp #Message Send Protocol
chargen 19/sctp ttytst source #Character Generator
chargen 19/tcp ttytst source #Character Generator
chargen 19/udp ttytst source #Character Generator
ftp-data 20/sctp #File Transfer [Default Data]
ftp-data 20/tcp #File Transfer [Default Data]
ftp-data 20/udp #File Transfer [Default Data]
ftp 21/sctp #File Transfer [Control]
ftp 21/tcp #File Transfer [Control]
ftp 21/udp #File Transfer [Control]
ssh 22/sctp #Secure Shell Login
ssh 22/tcp #Secure Shell Login
ssh 22/udp #Secure Shell Login
telnet 23/tcp
telnet 23/udp
# 24/tcp any private mail system
# 24/udp any private mail system
smtp 25/tcp mail #Simple Mail Transfer
smtp 25/udp mail #Simple Mail Transfer
nsw-fe 27/tcp #NSW User System FE
nsw-fe 27/udp #NSW User System FE
msg-icp 29/tcp #MSG ICP
msg-icp 29/udp #MSG ICP
msg-auth 31/tcp #MSG Authentication
msg-auth 31/udp #MSG Authentication
dsp 33/tcp #Display Support Protocol
dsp 33/udp #Display Support Protocol
# 35/tcp any private printer server
# 35/udp any private printer server
time 37/tcp timserver
time 37/udp timserver
rap 38/tcp #Route Access Protocol
rap 38/udp #Route Access Protocol
rlp 39/tcp resource #Resource Location Protocol
rlp 39/udp resource #Resource Location Protocol
graphics 41/tcp
graphics 41/udp
nameserver 42/tcp name #Host Name Server
nameserver 42/udp name #Host Name Server
nicname 43/tcp whois
nicname 43/udp whois
mpm-flags 44/tcp #MPM FLAGS Protocol
mpm-flags 44/udp #MPM FLAGS Protocol
mpm 45/tcp #Message Processing Module [recv]
mpm 45/udp #Message Processing Module [recv]
mpm-snd 46/tcp #MPM [default send]
mpm-snd 46/udp #MPM [default send]
ni-ftp 47/tcp #NI FTP
ni-ftp 47/udp #NI FTP
auditd 48/tcp #Digital Audit Daemon
auditd 48/udp #Digital Audit Daemon
tacacs 49/tcp #Login Host Protocol (TACACS)
tacacs 49/udp #Login Host Protocol (TACACS)
re-mail-ck 50/tcp #Remote Mail Checking Protocol
re-mail-ck 50/udp #Remote Mail Checking Protocol
la-maint 51/tcp #IMP Logical Address Maintenance
la-maint 51/udp #IMP Logical Address Maintenance
xns-time 52/tcp #XNS Time Protocol
xns-time 52/udp #XNS Time Protocol
domain 5"
723 a.out.32 RET read 32768/0x8000
723 a.out.32 CALL close(0x3)
723 a.out.32 RET close 0
723 a.out.32 CALL __sysctl(0xffffd8e0,0x6,0,0xffffd8dc,0,0)
723 a.out.32 SCTL "net.routetable.0.0.5.0"
723 a.out.32 RET __sysctl 0
723 a.out.32 CALL __sysctl(0xffffd8e0,0x6,0x2843d000,0xffffd8dc,0,0)
723 a.out.32 SCTL "net.routetable.0.0.5.0"
723 a.out.32 RET __sysctl 0
723 a.out.32 CALL stat(0xffffd7a8,0xffffd748)
723 a.out.32 NAMI "/usr/share/nls/C/libc.cat"
723 a.out.32 RET stat -1 errno 2 No such file or directory
723 a.out.32 CALL stat(0xffffd7a8,0xffffd748)
723 a.out.32 NAMI "/usr/share/nls/libc/C"
723 a.out.32 RET stat -1 errno 2 No such file or directory
723 a.out.32 CALL stat(0xffffd7a8,0xffffd748)
723 a.out.32 NAMI "/usr/local/share/nls/C/libc.cat"
723 a.out.32 RET stat -1 errno 2 No such file or directory
723 a.out.32 CALL stat(0xffffd7a8,0xffffd748)
723 a.out.32 NAMI "/usr/local/share/nls/libc/C"
723 a.out.32 RET stat -1 errno 2 No such file or directory
723 a.out.32 CALL write(0x2,0xffffd640,0xa)
723 a.out.32 GIO fd 2 wrote 10 bytes
"a.out.32: "
723 a.out.32 RET write 10/0xa
723 a.out.32 CALL write(0x2,0xffffd670,0x37)
723 a.out.32 GIO fd 2 wrote 55 bytes
"getaddrinfo: Non-recoverable failure in name resolution"
723 a.out.32 RET write 55/0x37
723 a.out.32 CALL write(0x2,0x281c0d1b,0x1)
723 a.out.32 GIO fd 2 wrote 1 byte
"
"
723 a.out.32 RET write 1
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffda90)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffd630)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_BLOCK,0x28065398,0xffffd630)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL sigprocmask(SIG_SETMASK,0x280653ac,0)
723 a.out.32 RET sigprocmask 0
723 a.out.32 CALL exit(0x4)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment