en tout cas merci de chercher à m'aider
voici un complément d'information sur le déroulement du programme :
truss -aelf sniffer --host dot04 --port 3306 --desc test -i hme0 -r -p -f "port 3306" > ecdb 2>&1
more ecdb
6706/1: execve("/usr/bin/sh", 0xFFBEFB14, 0xFFBEFB50) argc = 14
6706/1: argv: sh /bin/sniffer --host dot04 --port 3306 --desc test -i
6706/1: hme0 -r -p -f port 3306
6706/1: envp: PWD=/usr/snif FCEDIT=vi ORACLE_SID=????? TZ=MET
6706/1: SNIF_PATH=/usr/snif HOSTNAME=dot04
6706/1: LD_LIBRARY_PATH=/usr/snif/lib HORA=/oracle
6706/1: CLASSPATH=/usr/snif:/usr/snif/classes:/usr/snif/lib/mysql-connector-java-5.0.5-bin.ja
r
6706/1: MANPATH=/usr/share/man:/usr/local/man: PS1=dot04:root}
6706/1: SYBASE=/usr/local/sybase/V11 USER=root
6706/1: MACHTYPE=sparc-sun-solaris2.6 MAIL=/var/mail/root EDITOR=vi
6706/1: HOST=dot04 ORACLE_BASE=/oracle JAVA_HOME=/tmp/jre1.5.0_12
6706/1: ORACLE_HOME=/oracle/product/SunOS/EE.8.1.7
6706/1: SSH_CLIENT=10.28.64.65 47934 22 LOGNAME=root SHLVL=1
6706/1: SHELL=/sbin/sh HOSTTYPE=sparc OSTYPE=solaris2.6 HOME=/
6706/1: TERM=xterm
6706/1: PATH=/tmp/jre1.5.0_12/bin:/usr/snif:/usr/snif/lib:/bin:/usr/bin:/usr/bin/X11:/usr/loc
al/bin:/usr/local/bin:/usr/sbin:/usr/local/bin:/opt/SUNWspro/bin:/usr/proc/bin:/opt/local/bin/:/opt/sfw
/bin/:/usr/ucb:/usr/ccs/bin:
6706/1: SSH_TTY=/dev/pts/1 _=/bin/truss
6706/1: resolvepath("/usr/lib/ld.so.1", "/usr/lib/ld.so.1", 1023) = 16
6706/1: open("/var/ld/ld.config", O_RDONLY) Err#2 ENOENT
6706/1: stat("/usr/snif/lib/libgen.so.1", 0xFFBEF234) Err#2 ENOENT
6706/1: stat("/usr/lib/libgen.so.1", 0xFFBEF234) = 0
6706/1: open("/usr/lib/libgen.so.1", O_RDONLY) = 3
6706/1: fstat(3, 0xFFBEF234) = 0
6706/1: mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF3A0000
6706/1: mmap(0x00000000, 98304, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF380000
6706/1: mmap(0xFF396000, 2335, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 24576)
= 0xFF396000
6706/1: munmap(0xFF386000, 65536) = 0
6706/1: memcntl(0xFF380000, 6932, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
6706/1: close(3) = 0
6706/1: stat("/usr/snif/lib/libc.so.1", 0xFFBEF234) Err#2 ENOENT
6706/1: stat("/usr/lib/libc.so.1", 0xFFBEF234) = 0
6706/1: open("/usr/lib/libc.so.1", O_RDONLY) = 3
6706/1: fstat(3, 0xFFBEF234) = 0
6706/1: mmap(0xFF3A0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF3A0000
6706/1: mmap(0x00000000, 802816, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF280000
6706/1: mmap(0xFF33C000, 24764, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 70451
2) = 0xFF33C000
6706/1: munmap(0xFF32C000, 65536) = 0
6706/1: memcntl(0xFF280000, 113504, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0
6706/1: close(3) = 0
6706/1: stat("/usr/snif/lib/libdl.so.1", 0xFFBEF234) Err#2 ENOENT
6706/1: stat("/usr/lib/libdl.so.1", 0xFFBEF234) = 0
6706/1: open("/usr/lib/libdl.so.1", O_RDONLY) = 3
6706/1: fstat(3, 0xFFBEF234) = 0
6706/1: mmap(0xFF3A0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF3A0000
6706/1: close(3) = 0
6706/1: mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0
xFF370000
6706/1: stat("/usr/platform/SUNW,Ultra-250/lib/libc_psr.so.1", 0xFFBEF044) = 0
6706/1: open("/usr/platform/SUNW,Ultra-250/lib/libc_psr.so.1", O_RDONLY) = 3
6706/1: fstat(3, 0xFFBEF044) = 0
6706/1: mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF360000
6706/1: mmap(0x00000000, 16384, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF350000
6706/1: close(3) = 0
6706/1: munmap(0xFF360000, 8192) = 0
6706/1: getpid() = 6706 [6705]
6706/1: getpgid(6706) = 6705
6706/1: getsid(6706) = 4301
6706/1: brk(0x0003A0F0) = 0
6706/1: sysconfig(_CONFIG_SIGRT_MIN) = 38
6706/1: sysconfig(_CONFIG_SIGRT_MAX) = 45
6706/1: sigaltstack(0xFFBEFA04, 0x00000000) = 0
6706/1: sigaction(SIGHUP, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGHUP, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGINT, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGINT, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGQUIT, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGQUIT, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGILL, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGILL, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGTRAP, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGTRAP, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGABRT, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGABRT, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGEMT, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGEMT, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGFPE, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGFPE, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGBUS, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGBUS, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGSEGV, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGSYS, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGSYS, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGPIPE, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGPIPE, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGALRM, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGALRM, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGTERM, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGTERM, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGUSR1, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGUSR1, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGUSR2, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGUSR2, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGPWR, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGPWR, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGURG, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGURG, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGPOLL, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGPOLL, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGVTALRM, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGVTALRM, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGPROF, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGPROF, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGXCPU, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGXCPU, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGXFSZ, 0x00000000, 0xFFBEF980) = 0
6706/1: sigaction(SIGXFSZ, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGRTMIN, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGRTMIN+1, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGRTMIN+2, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGRTMIN+3, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGRTMAX-3, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGRTMAX-2, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGRTMAX-1, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: sigaction(SIGRTMAX, 0xFFBEF8E0, 0xFFBEF960) = 0
6706/1: brk(0x0003A0F8) = 0
6706/1: brk(0x0003A2F8) = 0
6706/1: brk(0x0003A4F8) = 0
6706/1: getuid() = 0 [0]
6706/1: getuid() = 0 [0]
6706/1: getgid() = 1 [1]
6706/1: getgid() = 1 [1]
6706/1: open64("/bin/sniffer", O_RDONLY) = 3
6706/1: close(19) Err#9 EBADF
6706/1: fcntl(3, F_DUPFD, 0x00000013) = 19
6706/1: close(3) = 0
6706/1: fcntl(19, F_SETFD, 0x00000001) = 0
6706/1: ioctl(2, TCGETA, 0xFFBEF92C) Err#25 ENOTTY
6706/1: read(19, " # / b i n / k s h\n\n".., 128) = 128
6706/1: brk(0x0003A7F8) = 0
6706/1: brk(0x0003A5F8) = 0
6706/1: brk(0x0003A9F8) = 0
6706/1: brk(0x0003A7F8) = 0
6706/1: brk(0x0003A5F8) = 0
6706/1: read(19, " P A T H } : $ { S N I F".., 128) = 128
6706/1: brk(0x0003AAF8) = 0
6706/1: brk(0x0003A8F8) = 0
6706/1: read(19, " . 0 . 5 - b i n . j a r".., 128) = 128
6706/1: brk(0x0003A6F8) = 0
6706/1: chdir("/usr/snif") = 0
6706/1: read(19, " l e s c r i p t p".., 128) = 128
6706/1: read(19, " 3 3 0 7 - - d e s c".., 128) = 128
6706/1: read(19, " C L A S S P A T H S n".., 128) = 128
6706/1: brk(0x0003ACF8) = 0
6706/1: getuid() = 0 [0]
6706/1: stat64("/tmp/jre1.5.0_12/bin/java", 0xFFBEF4C8) = 0
6706/1: access("/tmp/jre1.5.0_12/bin/java", 9) = 0
6706/1: read(19, " 0 2 4 m - c l a s s p".., 128) = 128
6706/1: read(19, " " " $ 4 "\n\t ; ;\n ".., 128) = 128
6706/1: read(19, " 2 4 m - c l a s s p a".., 128) = 128
6706/1: read(19, " " $ 1 " " $ 2 " "".., 128) = 128
6706/1: read(19, " 6 " " $ 7 " " $ 8 "".., 128) = 128
6706/1: brk(0x0003B3F8) = 0
6706/1: read(19, " 1 0 ) j a v a ".., 128) = 128
6706/1: read(19, " a - X m s 3 2 m - X".., 128) = 128
6706/1: read(19, " - X m s 3 2 m - X m x".., 128) = 128
6706/1: read(19, " j a v a - X m s 3 2".., 128) = 128
6706/1: read(19, " } "\n\t ; ;\n 1".., 128) = 128
6706/1: read(19, " " $ { 1 2 } " " $ {".., 128) = 128
6706/1: read(19, " " " $ 9 " " $ { 1 0".., 128) = 128
6706/1: brk(0x0003BBF8) = 0
6706/1: read(19, " " " $ 3 " " $ 4 " ".., 128) = 128
6706/1: read(19, " X m x 1 0 2 4 m - c l".., 128) = 48
/bin/sniffer6706/1: write(2, " / b i n / s n i f f e r", 12) = 12
: 6706/1: write(2, " : ", 2) = 2
bad substitution6706/1: write(2, " b a d s u b s t i t u".., 16) = 16
6706/1: write(2, "\n", 1) = 1
6706/1: llseek(0, 0, SEEK_CUR) = 354341
6706/1: _exit(1)
en tout cas merci de chercher à m'aider
voici un complément d'information sur le déroulement du programme :
truss -aelf sniffer --host dot04 --port 3306 --desc test -i hme0 -r -p -f "port 3306" > ecdb 2>&1 more ecdb 6706/1: execve("/usr/bin/sh", 0xFFBEFB14, 0xFFBEFB50) argc = 14 6706/1: argv: sh /bin/sniffer --host dot04 --port 3306 --desc test -i 6706/1: hme0 -r -p -f port 3306 6706/1: envp: PWD=/usr/snif FCEDIT=vi ORACLE_SID=????? TZ=MET 6706/1: SNIF_PATH=/usr/snif HOSTNAME=dot04 6706/1: LD_LIBRARY_PATH=/usr/snif/lib HORA=/oracle 6706/1: CLASSPATH=/usr/snif:/usr/snif/classes:/usr/snif/lib/mysql-connector-java-5.0.5-bin.ja r 6706/1: MANPATH=/usr/share/man:/usr/local/man: PS1=dot04:root} 6706/1: SYBASE=/usr/local/sybase/V11 USER=root 6706/1: MACHTYPE=sparc-sun-solaris2.6 MAIL=/var/mail/root EDITOR=vi 6706/1: HOST=dot04 ORACLE_BASE=/oracle JAVA_HOME=/tmp/jre1.5.0_12 6706/1: ORACLE_HOME=/oracle/product/SunOS/EE.8.1.7 6706/1: SSH_CLIENT=10.28.64.65 47934 22 LOGNAME=root SHLVL=1 6706/1: SHELL=/sbin/sh HOSTTYPE=sparc OSTYPE=solaris2.6 HOME=/ 6706/1: TERM=xterm 6706/1: PATH=/tmp/jre1.5.0_12/bin:/usr/snif:/usr/snif/lib:/bin:/usr/bin:/usr/bin/X11:/usr/loc al/bin:/usr/local/bin:/usr/sbin:/usr/local/bin:/opt/SUNWspro/bin:/usr/proc/bin:/opt/local/bin/:/opt/sfw /bin/:/usr/ucb:/usr/ccs/bin: 6706/1: SSH_TTY=/dev/pts/1 _=/bin/truss 6706/1: resolvepath("/usr/lib/ld.so.1", "/usr/lib/ld.so.1", 1023) = 16 6706/1: open("/var/ld/ld.config", O_RDONLY) Err#2 ENOENT 6706/1: stat("/usr/snif/lib/libgen.so.1", 0xFFBEF234) Err#2 ENOENT 6706/1: stat("/usr/lib/libgen.so.1", 0xFFBEF234) = 0 6706/1: open("/usr/lib/libgen.so.1", O_RDONLY) = 3 6706/1: fstat(3, 0xFFBEF234) = 0 6706/1: mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF3A0000 6706/1: mmap(0x00000000, 98304, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF380000 6706/1: mmap(0xFF396000, 2335, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 24576) = 0xFF396000 6706/1: munmap(0xFF386000, 65536) = 0 6706/1: memcntl(0xFF380000, 6932, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0 6706/1: close(3) = 0 6706/1: stat("/usr/snif/lib/libc.so.1", 0xFFBEF234) Err#2 ENOENT 6706/1: stat("/usr/lib/libc.so.1", 0xFFBEF234) = 0 6706/1: open("/usr/lib/libc.so.1", O_RDONLY) = 3 6706/1: fstat(3, 0xFFBEF234) = 0 6706/1: mmap(0xFF3A0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF3A0000 6706/1: mmap(0x00000000, 802816, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF280000 6706/1: mmap(0xFF33C000, 24764, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 70451 2) = 0xFF33C000 6706/1: munmap(0xFF32C000, 65536) = 0 6706/1: memcntl(0xFF280000, 113504, MC_ADVISE, MADV_WILLNEED, 0, 0) = 0 6706/1: close(3) = 0 6706/1: stat("/usr/snif/lib/libdl.so.1", 0xFFBEF234) Err#2 ENOENT 6706/1: stat("/usr/lib/libdl.so.1", 0xFFBEF234) = 0 6706/1: open("/usr/lib/libdl.so.1", O_RDONLY) = 3 6706/1: fstat(3, 0xFFBEF234) = 0 6706/1: mmap(0xFF3A0000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_FIXED, 3, 0) = 0xFF3A0000 6706/1: close(3) = 0 6706/1: mmap(0x00000000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_ANON, -1, 0) = 0 xFF370000 6706/1: stat("/usr/platform/SUNW,Ultra-250/lib/libc_psr.so.1", 0xFFBEF044) = 0 6706/1: open("/usr/platform/SUNW,Ultra-250/lib/libc_psr.so.1", O_RDONLY) = 3 6706/1: fstat(3, 0xFFBEF044) = 0 6706/1: mmap(0x00000000, 8192, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF360000 6706/1: mmap(0x00000000, 16384, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0xFF350000 6706/1: close(3) = 0 6706/1: munmap(0xFF360000, 8192) = 0 6706/1: getpid() = 6706 [6705] 6706/1: getpgid(6706) = 6705 6706/1: getsid(6706) = 4301 6706/1: brk(0x0003A0F0) = 0 6706/1: sysconfig(_CONFIG_SIGRT_MIN) = 38 6706/1: sysconfig(_CONFIG_SIGRT_MAX) = 45 6706/1: sigaltstack(0xFFBEFA04, 0x00000000) = 0 6706/1: sigaction(SIGHUP, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGHUP, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGINT, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGINT, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGQUIT, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGQUIT, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGILL, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGILL, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGTRAP, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGTRAP, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGABRT, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGABRT, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGEMT, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGEMT, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGFPE, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGFPE, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGBUS, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGBUS, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGSEGV, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGSYS, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGSYS, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGPIPE, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGPIPE, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGALRM, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGALRM, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGTERM, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGTERM, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGUSR1, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGUSR1, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGUSR2, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGUSR2, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGPWR, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGPWR, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGURG, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGURG, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGPOLL, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGPOLL, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGVTALRM, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGVTALRM, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGPROF, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGPROF, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGXCPU, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGXCPU, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGXFSZ, 0x00000000, 0xFFBEF980) = 0 6706/1: sigaction(SIGXFSZ, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGRTMIN, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGRTMIN+1, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGRTMIN+2, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGRTMIN+3, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGRTMAX-3, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGRTMAX-2, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGRTMAX-1, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: sigaction(SIGRTMAX, 0xFFBEF8E0, 0xFFBEF960) = 0 6706/1: brk(0x0003A0F8) = 0 6706/1: brk(0x0003A2F8) = 0 6706/1: brk(0x0003A4F8) = 0 6706/1: getuid() = 0 [0] 6706/1: getuid() = 0 [0] 6706/1: getgid() = 1 [1] 6706/1: getgid() = 1 [1] 6706/1: open64("/bin/sniffer", O_RDONLY) = 3 6706/1: close(19) Err#9 EBADF 6706/1: fcntl(3, F_DUPFD, 0x00000013) = 19 6706/1: close(3) = 0 6706/1: fcntl(19, F_SETFD, 0x00000001) = 0 6706/1: ioctl(2, TCGETA, 0xFFBEF92C) Err#25 ENOTTY 6706/1: read(19, " # / b i n / k s h\n\n".., 128) = 128 6706/1: brk(0x0003A7F8) = 0 6706/1: brk(0x0003A5F8) = 0 6706/1: brk(0x0003A9F8) = 0 6706/1: brk(0x0003A7F8) = 0 6706/1: brk(0x0003A5F8) = 0 6706/1: read(19, " P A T H } : $ { S N I F".., 128) = 128 6706/1: brk(0x0003AAF8) = 0 6706/1: brk(0x0003A8F8) = 0 6706/1: read(19, " . 0 . 5 - b i n . j a r".., 128) = 128 6706/1: brk(0x0003A6F8) = 0 6706/1: chdir("/usr/snif") = 0 6706/1: read(19, " l e s c r i p t p".., 128) = 128 6706/1: read(19, " 3 3 0 7 - - d e s c".., 128) = 128 6706/1: read(19, " C L A S S P A T H S n".., 128) = 128 6706/1: brk(0x0003ACF8) = 0 6706/1: getuid() = 0 [0] 6706/1: stat64("/tmp/jre1.5.0_12/bin/java", 0xFFBEF4C8) = 0 6706/1: access("/tmp/jre1.5.0_12/bin/java", 9) = 0 6706/1: read(19, " 0 2 4 m - c l a s s p".., 128) = 128 6706/1: read(19, " " " $ 4 "\n\t ; ;\n ".., 128) = 128 6706/1: read(19, " 2 4 m - c l a s s p a".., 128) = 128 6706/1: read(19, " " $ 1 " " $ 2 " "".., 128) = 128 6706/1: read(19, " 6 " " $ 7 " " $ 8 "".., 128) = 128 6706/1: brk(0x0003B3F8) = 0 6706/1: read(19, " 1 0 ) j a v a ".., 128) = 128 6706/1: read(19, " a - X m s 3 2 m - X".., 128) = 128 6706/1: read(19, " - X m s 3 2 m - X m x".., 128) = 128 6706/1: read(19, " j a v a - X m s 3 2".., 128) = 128 6706/1: read(19, " } "\n\t ; ;\n 1".., 128) = 128 6706/1: read(19, " " $ { 1 2 } " " $ {".., 128) = 128 6706/1: read(19, " " " $ 9 " " $ { 1 0".., 128) = 128 6706/1: brk(0x0003BBF8) = 0 6706/1: read(19, " " " $ 3 " " $ 4 " ".., 128) = 128 6706/1: read(19, " X m x 1 0 2 4 m - c l".., 128) = 48 /bin/sniffer6706/1: write(2, " / b i n / s n i f f e r", 12) = 12 : 6706/1: write(2, " : ", 2) = 2 bad substitution6706/1: write(2, " b a d s u b s t i t u".., 16) = 16 6706/1: write(2, "\n", 1) = 1 6706/1: llseek(0, 0, SEEK_CUR) = 354341 6706/1: _exit(1)