24846 13:02:07.540391 select(7, [3], NULL, NULL, {53, 630000}) = 1 (in [3], left {47, 810000})
24846 13:02:13.357186 accept(3, {sa_family=AF_INET, sin_port=htons(42178), sin_addr=inet_addr("10.0.0.2")}, [16]) = 5
24846 13:02:13.358039 pipe([6, 7])      = 0
24846 13:02:13.358594 fork()            = 25675
24846 13:02:13.359644 close(7)          = 0
24846 13:02:13.360088 close(5)          = 0
24846 13:02:13.360529 select(7, [3 6], NULL, NULL, {60, 0} <unfinished ...>
25675 13:02:13.361666 rt_sigaction(SIGPIPE, {0x300bc640, [], 0}, {SIG_IGN}, 8) = 0
25675 13:02:13.362367 time([1180875733]) = 1180875733
25675 13:02:13.363120 getpid()          = 25675
25675 13:02:13.363642 write(4, "<86>Jun  3 13:02:13 dropbear[256"..., 74) = 74
25675 13:02:13.364231 rt_sigaction(SIGPIPE, {SIG_IGN}, NULL, 8) = 0
25675 13:02:13.364771 setsid()          = 25675
25675 13:02:13.365208 close(3)          = 0
25675 13:02:13.365647 close(6)          = 0
25675 13:02:13.366148 open("/etc/hosts", O_RDONLY) = 3
25675 13:02:13.366790 ioctl(3, TCGETS, 0x7fb10ee8) = -1 ENOTTY (Inappropriate ioctl for device)
25675 13:02:13.367576 read(3, "# /etc/hosts: Local Host Databas"..., 4096) = 1095
25675 13:02:13.368288 close(3)          = 0
25675 13:02:13.368857 getpid()          = 25675
25675 13:02:13.369337 gettimeofday({1180875733, 369516}, NULL) = 0
25675 13:02:13.369884 pipe([3, 6])      = 0
25675 13:02:13.370422 fcntl64(3, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
25675 13:02:13.370896 fcntl64(6, F_SETFL, O_RDONLY|O_NONBLOCK) = 0
25675 13:02:13.371362 gettimeofday({1180875733, 371539}, NULL) = 0
25675 13:02:13.371844 brk(0x1003f000)   = 0x1003f000
25675 13:02:13.373035 brk(0x10041000)   = 0x10041000
25675 13:02:13.373777 rt_sigaction(SIGCHLD, {0x1000ee18, ~[HUP INT QUIT TRAP BUS FPE USR1 SEGV ALRM TERM STKFLT CONT STOP TSTP URG RTMIN RT_1 RT_2 RT_3 RT_6 RT_7 RT_9 RT_14 RT_16 RT_19 RT_20 RT_21 RT_22 RT_23 RT_24 RT_25 RT_26 RT_27 RT_28 RT_30], SA_NOCLDSTOP}, NULL, 8) = 0
25675 13:02:13.374773 gettimeofday({1180875733, 374953}, NULL) = 0
25675 13:02:13.375294 write(5, "SSH-2.0-dropbear_0.49\r\n", 23) = 23
25675 13:02:13.376465 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.377102 gettimeofday({1180875733, 377282}, NULL) = 0
25675 13:02:13.377573 read(5, "S", 1)   = 1
25675 13:02:13.378080 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.378693 gettimeofday({1180875733, 378872}, NULL) = 0
25675 13:02:13.379162 read(5, "S", 1)   = 1
25675 13:02:13.379667 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.380280 gettimeofday({1180875733, 380458}, NULL) = 0
25675 13:02:13.380749 read(5, "H", 1)   = 1
25675 13:02:13.381254 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.381867 gettimeofday({1180875733, 382080}, NULL) = 0
25675 13:02:13.382373 read(5, "-", 1)   = 1
25675 13:02:13.382880 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.383494 gettimeofday({1180875733, 383672}, NULL) = 0
25675 13:02:13.383963 read(5, "2", 1)   = 1
25675 13:02:13.384469 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.385083 gettimeofday({1180875733, 385261}, NULL) = 0
25675 13:02:13.385552 read(5, ".", 1)   = 1
25675 13:02:13.386060 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.386673 gettimeofday({1180875733, 386853}, NULL) = 0
25675 13:02:13.387144 read(5, "0", 1)   = 1
25675 13:02:13.387648 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.388263 gettimeofday({1180875733, 388442}, NULL) = 0
25675 13:02:13.388733 read(5, "-", 1)   = 1
25675 13:02:13.389239 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.389853 gettimeofday({1180875733, 390031}, NULL) = 0
25675 13:02:13.390323 read(5, "O", 1)   = 1
25675 13:02:13.390828 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.391441 gettimeofday({1180875733, 391620}, NULL) = 0
25675 13:02:13.391911 read(5, "p", 1)   = 1
25675 13:02:13.392454 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.393302 gettimeofday({1180875733, 393489}, NULL) = 0
25675 13:02:13.393782 read(5, "e", 1)   = 1
25675 13:02:13.394294 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.394913 gettimeofday({1180875733, 395093}, NULL) = 0
25675 13:02:13.395386 read(5, "n", 1)   = 1
25675 13:02:13.395894 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.396510 gettimeofday({1180875733, 396690}, NULL) = 0
25675 13:02:13.396982 read(5, "S", 1)   = 1
25675 13:02:13.397489 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.398105 gettimeofday({1180875733, 398285}, NULL) = 0
25675 13:02:13.398577 read(5, "S", 1)   = 1
25675 13:02:13.399085 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.399700 gettimeofday({1180875733, 399880}, NULL) = 0
25675 13:02:13.400172 read(5, "H", 1)   = 1
25675 13:02:13.400680 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.401295 gettimeofday({1180875733, 401475}, NULL) = 0
25675 13:02:13.401767 read(5, "_", 1)   = 1
25675 13:02:13.402304 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.402920 gettimeofday({1180875733, 403100}, NULL) = 0
25675 13:02:13.403391 read(5, "4", 1)   = 1
25675 13:02:13.403899 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.404514 gettimeofday({1180875733, 404694}, NULL) = 0
25675 13:02:13.404985 read(5, ".", 1)   = 1
25675 13:02:13.405492 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.406107 gettimeofday({1180875733, 406288}, NULL) = 0
25675 13:02:13.406579 read(5, "5", 1)   = 1
25675 13:02:13.407086 select(6, [5], NULL, NULL, {1, 0}) = 1 (in [5], left {1, 0})
25675 13:02:13.407702 gettimeofday({1180875733, 407881}, NULL) = 0
25675 13:02:13.408173 read(5, "\n", 1)  = 1
25675 13:02:13.408902 select(6, [3 5], [5], NULL, {20, 0}) = 2 (in [5], out [5], left {20, 0})
25675 13:02:13.409596 gettimeofday({1180875733, 409775}, NULL) = 0
25675 13:02:13.410070 write(5, "\0\0\1l\n\24ts#\256QtQj\237\215 \265\202\335\336\270\0"..., 368) = 368
25675 13:02:13.410887 read(5, "\0\0\2\354\10\24\227\305", 8) = 8
25675 13:02:13.411479 read(5, "r\321\200\207\356\217*h\16o\236\224\261\237\0\0\0~diff"..., 744) = 744
25675 13:02:13.412244 brk(0x10042000)   = 0x10042000
25675 13:02:13.412834 brk(0x10044000)   = 0x10044000
25675 13:02:13.413641 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {20, 0})
25675 13:02:13.415540 gettimeofday({1180875733, 415723}, NULL) = 0
25675 13:02:13.416040 read(5, "\0\0\0\214\6\36\0\0", 8) = 8
25675 13:02:13.416631 read(5, "\0\200UJ\v+t\332+-\211\351\3730\353\205\6\366\223\262\357"..., 136) = 136
25675 13:02:13.417728 brk(0x10045000)   = 0x10045000
25675 13:02:13.419114 brk(0x10046000)   = 0x10046000
25675 13:02:13.420858 brk(0x10047000)   = 0x10047000
25675 13:02:13.422637 brk(0x10048000)   = 0x10048000
25675 13:02:13.788212 select(6, [3 5], [5], NULL, {20, 0}) = 1 (out [5], left {20, 0})
25675 13:02:13.788902 gettimeofday({1180875733, 789082}, NULL) = 0
25675 13:02:13.789377 write(5, "\0\0\1\304\v\37\0\0\0\231\0\0\0\7ssh-rsa\0\0\0\3\1\0\1"..., 456) = 456
25675 13:02:13.790234 select(6, [3 5], [5], NULL, {20, 0}) = 1 (out [5], left {20, 0})
25675 13:02:13.790900 gettimeofday({1180875733, 791080}, NULL) = 0
25675 13:02:13.791375 write(5, "\0\0\0\f\n\25\307@\345]B\231\\\265$\255", 16) = 16
25675 13:02:13.792140 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {19, 980000})
25675 13:02:13.813982 gettimeofday({1180875733, 814166}, NULL) = 0
25675 13:02:13.814482 read(5, "\0\0\0\f\n\25\0\0", 8) = 8
25675 13:02:13.815061 read(5, "\0\0\0\0\0\0\0\0", 8) = 8
25675 13:02:13.816259 gettimeofday({1180875733, 816453}, NULL) = 0
25675 13:02:13.816793 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {20, 0})
25675 13:02:13.817446 gettimeofday({1180875733, 817626}, NULL) = 0
25675 13:02:13.817943 read(5, "\344\315\7<kI\207\346n\276\373\323\372\327\243\0", 16) = 16
25675 13:02:13.818618 read(5, "\233<\25,P\315\327\33\236U\260\17\r6\347\"\224\334q\230"..., 32) = 32
25675 13:02:13.819614 select(6, [3 5], [5], NULL, {20, 0}) = 1 (out [5], left {20, 0})
25675 13:02:13.820293 gettimeofday({1180875733, 820474}, NULL) = 0
25675 13:02:13.820770 write(5, "\344J\210\311\237?\212\316\22\336\3422\0\200\260H8\234"..., 48) = 48
25675 13:02:13.821573 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {19, 990000})
25675 13:02:13.826076 gettimeofday({1180875733, 826258}, NULL) = 0
25675 13:02:13.826571 read(5, "\30N\25\7\271\321-\220\23NK\274\202\342\355}", 16) = 16
25675 13:02:13.827217 read(5, "-\306p\22\215\237\327o\353l\242\303\t\250e\200~JeGA%5\222"..., 48) = 48
25675 13:02:13.828067 select(6, [3 5], [5], NULL, {20, 0}) = 1 (out [5], left {20, 0})
25675 13:02:13.828741 gettimeofday({1180875733, 828922}, NULL) = 0
25675 13:02:13.829217 write(5, "9/@|\350\352\315UE\361!0\372\206\4\371\241\20\262\36\2"..., 64) = 64
25675 13:02:13.830018 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {18, 300000})
25675 13:02:15.524662 gettimeofday({1180875735, 524834}, NULL) = 0
25675 13:02:15.525151 read(5, "\371\263\r\317\241u\33\207\317\370\276\375yO\2441", 16) = 16
25675 13:02:15.525783 read(5, "w\242\240r\17\267m\303bF\327\31\252\"\375F6\350\2039\22"..., 128) = 128
25675 13:02:15.526588 open("/etc/passwd", O_RDONLY) = 8
25675 13:02:15.527130 ioctl(8, TCGETS, 0x7fb115a8) = -1 ENOTTY (Inappropriate ioctl for device)
25675 13:02:15.527642 read(8, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1247
25675 13:02:15.528220 close(8)          = 0
25675 13:02:15.528742 open("/etc/shells", O_RDONLY) = 8
25675 13:02:15.529291 ioctl(8, TCGETS, 0x7fb11558) = -1 ENOTTY (Inappropriate ioctl for device)
25675 13:02:15.529787 fstat(8, {st_mode=S_IFREG|0644, st_size=108, ...}) = 0
25675 13:02:15.530426 read(8, "# /etc/shells: valid login shell"..., 4096) = 108
25675 13:02:15.530970 read(8, "", 4096) = 0
25675 13:02:15.531428 close(8)          = 0
25675 13:02:15.531952 open("/etc/shadow", O_RDONLY) = 8
25675 13:02:15.532538 ioctl(8, TCGETS, 0x7fb11588) = -1 ENOTTY (Inappropriate ioctl for device)
25675 13:02:15.533038 read(8, "root:$1$wzQ1jybC$78lPrns7HrjPeJK"..., 4096) = 597
25675 13:02:15.533645 close(8)          = 0
25675 13:02:15.543697 rt_sigaction(SIGPIPE, {0x300bc640, [], 0}, {SIG_IGN}, 8) = 0
25675 13:02:15.544296 time([1180875735]) = 1180875735
25675 13:02:15.544825 getpid()          = 25675
25675 13:02:15.545294 write(4, "<84>Jun  3 13:02:15 dropbear[256"..., 89) = 89
25675 13:02:15.545839 rt_sigaction(SIGPIPE, {SIG_IGN}, NULL, 8) = 0
25675 13:02:15.546508 nanosleep({0, 300000000}, NULL) = 0
25675 13:02:15.852344 select(6, [3 5], [5], NULL, {20, 0}) = 1 (out [5], left {20, 0})
25675 13:02:15.853019 gettimeofday({1180875735, 853188}, NULL) = 0
25675 13:02:15.853487 write(5, "\316yF\270\261\375\254W$\303k\266x\326Q]\27>\2\217\6P\254"..., 64) = 64
25675 13:02:15.854398 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {16, 160000})
25675 13:02:19.701614 gettimeofday({1180875739, 701798}, NULL) = 0
25675 13:02:19.702141 read(5, "\35\237i%\300\16W\205\223\21%9\355\347/\215", 16) = 16
25675 13:02:19.702778 read(5, "\243\37\207\fy\3619\262>T\375l\0\231\365\335\2\"\34AK\333"..., 128) = 128
25675 13:02:19.703580 open("/etc/shells", O_RDONLY) = 8
25675 13:02:19.704145 ioctl(8, TCGETS, 0x7fb11558) = -1 ENOTTY (Inappropriate ioctl for device)
25675 13:02:19.704662 fstat(8, {st_mode=S_IFREG|0644, st_size=108, ...}) = 0
25675 13:02:19.705292 read(8, "# /etc/shells: valid login shell"..., 4096) = 108
25675 13:02:19.705849 read(8, "", 4096) = 0
25675 13:02:19.706315 close(8)          = 0
25675 13:02:19.706811 open("/etc/shadow", O_RDONLY) = 8
25675 13:02:19.707362 ioctl(8, TCGETS, 0x7fb11588) = -1 ENOTTY (Inappropriate ioctl for device)
25675 13:02:19.707874 read(8, "root:$1$wzQ1jybC$78lPrns7HrjPeJK"..., 4096) = 597
25675 13:02:19.708436 close(8)          = 0
25675 13:02:19.718317 rt_sigaction(SIGPIPE, {0x300bc640, [], 0}, {SIG_IGN}, 8) = 0
25675 13:02:19.718911 time([1180875739]) = 1180875739
25675 13:02:19.719440 getpid()          = 25675
25675 13:02:19.719921 write(4, "<85>Jun  3 13:02:19 dropbear[256"..., 92) = 92
25675 13:02:19.721363 rt_sigaction(SIGPIPE, {SIG_IGN}, NULL, 8) = 0
25675 13:02:19.722027 close(7 <unfinished ...>
24846 13:02:19.722335 <... select resumed> ) = 1 (in [6], left {53, 630000})
25675 13:02:19.722701 <... close resumed> ) = 0
24846 13:02:19.722936 close(6)          = 0
24846 13:02:19.723439 select(7, [3], NULL, NULL, {60, 0} <unfinished ...>
25675 13:02:19.723833 select(6, [3 5], [5], NULL, {20, 0}) = 1 (out [5], left {20, 0})
25675 13:02:19.724499 gettimeofday({1180875739, 724679}, NULL) = 0
25675 13:02:19.724975 write(5, "BU\330\17\303\r\340\314\6\0365_@D\23\374\330\341)%6OKh"..., 32) = 32
25675 13:02:19.725986 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {20, 0})
25675 13:02:19.726637 gettimeofday({1180875739, 726818}, NULL) = 0
25675 13:02:19.727130 read(5, "wo9\v\333`\321kim6X\316\321\310\307", 16) = 16
25675 13:02:19.727741 read(5, "-\341\271Cw\374\33\346\352\27\336\260\177\24\2762\37\f"..., 48) = 48
25675 13:02:19.728734 select(6, [3 5], [5], NULL, {20, 0}) = 1 (out [5], left {20, 0})
25675 13:02:19.729420 gettimeofday({1180875739, 729600}, NULL) = 0
25675 13:02:19.729895 write(5, "\256\254\f}\363\27^\337@0)\242w\352\6\203\22\326O\326\377"..., 48) = 48
25675 13:02:19.730852 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {20, 0})
25675 13:02:19.731508 gettimeofday({1180875739, 731688}, NULL) = 0
25675 13:02:19.732036 read(5, "\257\252\334\350#\24^\0106\317\27\317n\233\324\26", 16) = 16
25675 13:02:19.732693 read(5, "\354rah\326\235\201\220\203h\4f-\353\201\n\7\n\237\335"..., 320) = 320
25675 13:02:19.733555 open("/dev/ptmx", O_RDWR) = -1 ENOENT (No such file or directory)
25675 13:02:19.734204 rt_sigaction(SIGPIPE, {0x300bc640, [], 0}, {SIG_IGN}, 8) = 0
25675 13:02:19.734797 time([1180875739]) = 1180875739
25675 13:02:19.735325 getpid()          = 25675
25675 13:02:19.735804 write(4, "<84>Jun  3 13:02:19 dropbear[256"..., 86) = 86
25675 13:02:19.736983 rt_sigaction(SIGPIPE, {SIG_IGN}, NULL, 8) = 0
25675 13:02:19.737521 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {20, 0})
25675 13:02:19.738169 gettimeofday({1180875739, 738350}, NULL) = 0
25675 13:02:19.738667 read(5, "\0\t\250\276F\200\243XI\345``o\262j\275", 16) = 16
25675 13:02:19.739294 read(5, "\254\241\272\333`Ir\224\r\342iQ\315n4\274\251\34\310\17"..., 32) = 32
25675 13:02:19.740073 rt_sigaction(SIGPIPE, {0x300bc640, [], 0}, {SIG_IGN}, 8) = 0
25675 13:02:19.740664 time([1180875739]) = 1180875739
25675 13:02:19.741190 getpid()          = 25675
25675 13:02:19.741669 write(4, "<84>Jun  3 13:02:19 dropbear[256"..., 76) = 76
25675 13:02:19.742864 rt_sigaction(SIGPIPE, {SIG_IGN}, NULL, 8) = 0
25675 13:02:19.743399 select(6, [3 5], [], NULL, {20, 0}) = 1 (in [5], left {14, 820000})
25675 13:02:24.928775 gettimeofday({1180875744, 928960}, NULL) = 0
25675 13:02:24.929279 read(5, "", 16)   = 0
25675 13:02:24.929768 close(5)          = 0
25675 13:02:24.930658 rt_sigaction(SIGPIPE, {0x300bc640, [], 0}, {SIG_IGN}, 8) = 0
25675 13:02:24.931248 time([1180875744]) = 1180875744
25675 13:02:24.931774 getpid()          = 25675
25675 13:02:24.932284 write(4, "<86>Jun  3 13:02:24 dropbear[256"..., 77) = 77
25675 13:02:24.933483 rt_sigaction(SIGPIPE, {SIG_IGN}, NULL, 8) = 0
25675 13:02:24.934124 close(-2)         = -1 EBADF (Bad file descriptor)
25675 13:02:24.934589 close(-2)         = -1 EBADF (Bad file descriptor)
25675 13:02:24.935034 close(-1)         = -1 EBADF (Bad file descriptor)
25675 13:02:24.935921 exit(0)           = ?
24846 13:02:24.936754 <... select resumed> ) = ? ERESTARTNOHAND (To be restarted)
24846 13:02:24.937018 --- SIGCHLD (Child exited) @ 0 (0) ---
24846 13:02:24.937251 wait4(-1, NULL, WNOHANG, NULL) = 25675
24846 13:02:24.937752 wait4(-1, NULL, WNOHANG, NULL) = -1 ECHILD (No child processes)
24846 13:02:24.938244 rt_sigaction(SIGCHLD, {0x100111ac, [RT_1 RT_5 RT_6 RT_7 RT_10 RT_13 RT_18 RT_20 RT_22 RT_26 RT_29 RT_30], SA_NOCLDSTOP}, NULL, 8) = 0
24846 13:02:24.938956 sigreturn()       = ? (mask now [HUP])
24846 13:02:24.939476 select(7, [3], NULL, NULL, {60, 0} <unfinished ...>