execve("/sbin/iptables", ["/sbin/iptables", "-t", "mangle", "-A", "OUTPUT", "-o", "eth0", "-m", "length", "--length", "0:500", "-j", "MARK", "--set-mark", "1"], [/* 20 vars */]) = 0
uname({sys="Linux", node="kiba", ...})  = 0
brk(0)                                  = 0x2c000
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=43014, ...}) = 0
mmap(NULL, 43014, PROT_READ, MAP_PRIVATE, 3, 0) = 0xf7f74000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/v9/libdl.so.2", O_RDONLY)    = 3
read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0\r"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=18108, ...}) = 0
mmap(NULL, 82408, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7f5c000
mprotect(0xf7f5e000, 74216, PROT_NONE)  = 0
mmap(0xf7f6e000, 16384, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0xf7f6e000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/v9/libnsl.so.1", O_RDONLY)   = 3
read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0<@"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=86472, ...}) = 0
mmap(NULL, 159024, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7f34000
mprotect(0xf7f48000, 77104, PROT_NONE)  = 0
mmap(0xf7f56000, 16384, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12000) = 0xf7f56000
mmap(0xf7f5a000, 3376, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xf7f5a000
close(3)                                = 0
access("/etc/ld.so.nohwcap", F_OK)      = -1 ENOENT (No such file or directory)
open("/lib/v9/libc.so.6", O_RDONLY)     = 3
read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\1\315"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1362304, ...}) = 0
mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7f72000
mmap(NULL, 1431752, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7dd4000
mprotect(0xf7f18000, 104648, PROT_NONE) = 0
mmap(0xf7f28000, 32768, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x144000) = 0xf7f28000
mmap(0xf7f30000, 6344, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xf7f30000
close(3)                                = 0
mprotect(0xf7f28000, 16384, PROT_READ)  = 0
mprotect(0xf7f56000, 8192, PROT_READ)   = 0
mprotect(0xf7f6e000, 8192, PROT_READ)   = 0
munmap(0xf7f74000, 43014)               = 0
brk(0)                                  = 0x2c000
brk(0x4e000)                            = 0x4e000
open("/lib/iptables/libipt_length.so", O_RDONLY) = 3
read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\2\0\0\0\1\0\0\4h"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=3452, ...}) = 0
mmap(NULL, 68380, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7dc0000
mprotect(0xf7dc2000, 60188, PROT_NONE)  = 0
mmap(0xf7dd0000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0) = 0xf7dd0000
close(3)                                = 0
open("/lib/iptables/libipt_MARK.so", O_RDONLY) = 3
read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\2\0\0\0\1\0\0\4\34"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=3876, ...}) = 0
mmap(NULL, 68804, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7dac000
mprotect(0xf7dae000, 60612, PROT_NONE)  = 0
mmap(0xf7dbc000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0) = 0xf7dbc000
close(3)                                = 0
socket(PF_INET, SOCK_RAW, IPPROTO_RAW)  = 3
getsockopt(3, SOL_IP, 0x43 /* IP_??? */, 0xff8e51b6, 0xff8e51d4) = -1 EINVAL (Invalid argument)
write(2, "getsockopt failed strangely: Inv"..., 46getsockopt failed strangely: Invalid argument
) = 46
exit_group(1)                           = ?
Process 5676 detached