Package: arpwatch
Version: 2.1a15-1.2
Severity: important
Dear Maintainer,
after the start arpwatch uses 100% CPU and does not log any
addresses to /var/lib/arpwatch/arp.dat:
-rw-r----- 1 arpwatch root 0 2013-12-30 14:53 /var/lib/arpwatch/arp.dat
A trace of arpwatch is attached (strace /usr/sbin/arpwatch -d).
This behavior is reproducible on every start, only the number
of calls to poll at the end of the trace differs (from one to
several).
Regards
Uwe
-- System Information:
Debian Release: jessie/sid
APT prefers testing
APT policy: (750, 'testing'), (650, 'unstable'), (1, 'experimental')
Architecture: i386 (x86_64)
Kernel: Linux 3.9-1-amd64 (SMP w/2 CPU cores)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Versions of packages arpwatch depends on:
ii adduser 3.113+nmu3
ii libc6 2.17-97
ii libpcap0.8 1.5.2-1
arpwatch recommends no packages.
arpwatch suggests no packages.
-- debconf-show failed
execve("/usr/sbin/arpwatch", ["/usr/sbin/arpwatch", "-d"], [/* 18 vars */]) = 0
brk(0) = 0x9336000
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
mmap2(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0xf76f9000
access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY|O_CLOEXEC) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=199715, ...}) = 0
mmap2(NULL, 199715, PROT_READ, MAP_PRIVATE, 3, 0) = 0xf76c8000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/i386-linux-gnu/i686/cmov/libresolv.so.2", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 '\0\0004\0\0\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=79720, ...}) = 0
mmap2(NULL, 92232, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0xf76b1000
mmap2(0xf76c4000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12) = 0xf76c4000
mmap2(0xf76c6000, 6216, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xf76c6000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/usr/lib/i386-linux-gnu/libpcap.so.0.8", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\00000\0\0004\0\0\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0644, st_size=243892, ...}) = 0
mmap2(NULL, 244608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0xf7675000
mmap2(0xf76af000, 8192, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x3a) = 0xf76af000
close(3) = 0
access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
open("/lib/i386-linux-gnu/i686/cmov/libc.so.6", O_RDONLY|O_CLOEXEC) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \232\1\0004\0\0\0"...,
512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1763108, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0xf7674000
mmap2(NULL, 1768220, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
0xf74c4000
mmap2(0xf766e000, 12288, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1aa) = 0xf766e000
mmap2(0xf7671000, 11036, PROT_READ|PROT_WRITE,
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xf7671000
close(3) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0xf74c3000
set_thread_area({entry_number:-1 -> 12, base_addr:0xf74c36c0, limit:1048575,
seg_32bit:1, contents:0, read_exec_only:0, limit_in_pages:1, seg_not_present:0,
useable:1}) = 0
mprotect(0xf766e000, 8192, PROT_READ) = 0
mprotect(0xf76af000, 4096, PROT_READ) = 0
mprotect(0xf76c4000, 4096, PROT_READ) = 0
mprotect(0x804f000, 4096, PROT_READ) = 0
mprotect(0xf771b000, 4096, PROT_READ) = 0
munmap(0xf76c8000, 199715) = 0
socket(PF_NETLINK, SOCK_RAW, 0) = 3
bind(3, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 0
getsockname(3, {sa_family=AF_NETLINK, pid=10704, groups=00000000}, [12]) = 0
time(NULL) = 1388413817
sendto(3, "\24\0\0\0\22\0\1\3y\203\301R\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\f\4\0\0\20\0\2\0y\203\301R\320)\0\0\0\0\4\3\1\0\0\0I\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 2080
brk(0) = 0x9336000
brk(0x9357000) = 0x9357000
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0y\203\301R\320)\0\0\0\0\0\0\1\0\0\0I\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
sendto(3, "\24\0\0\0\26\0\1\3z\203\301R\0\0\0\0\0\0\0\0", 20, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 20
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"D\0\0\0\24\0\2\0z\203\301R\320)\0\0\2\10\200\376\1\0\0\0\10\0\1\0\177\0\0\1"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 148
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"@\0\0\0\24\0\2\0z\203\301R\320)\0\0\n\200\200\376\1\0\0\0\24\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 128
recvmsg(3, {msg_name(12)={sa_family=AF_NETLINK, pid=0, groups=00000000},
msg_iov(1)=[{"\24\0\0\0\3\0\2\0z\203\301R\320)\0\0\0\0\0\0\1\0\0\0\24\0\1\0\0\0\0\0"...,
4096}], msg_controllen=0, msg_flags=0}, 0) = 20
close(3) = 0
socket(PF_PACKET, SOCK_RAW, 768) = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="lo", ifr_hwaddr=00:00:00:00:00:00}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if1, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
setsockopt(3, SOL_PACKET, PACKET_AUXDATA, [1], 4) = 0
getsockopt(3, SOL_PACKET, PACKET_HDRLEN, [36], [4]) = 0
setsockopt(3, SOL_PACKET, PACKET_VERSION, [2], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RESERVE, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING,
"\0\0\2\0\20\0\0\0\0\0\2\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 28) = 0
mmap2(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0xf72c3000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, {block_size=0, block_nr=0,
frame_size=0, frame_nr=0}, 16) = -1 EINVAL (Invalid argument)
munmap(0xf72c3000, 2097152) = 0
close(3) = 0
socket(PF_PACKET, SOCK_RAW, 768) = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="eth0", ifr_hwaddr=00:23:7d:4d:85:c7}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="eth0", ifr_index=2}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if2, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
setsockopt(3, SOL_PACKET, PACKET_AUXDATA, [1], 4) = 0
getsockopt(3, SOL_PACKET, PACKET_HDRLEN, [36], [4]) = 0
setsockopt(3, SOL_PACKET, PACKET_VERSION, [2], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RESERVE, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING,
"\0\0\2\0\20\0\0\0\0\0\2\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 28) = 0
mmap2(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0xf72c3000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, {block_size=0, block_nr=0,
frame_size=0, frame_nr=0}, 16) = -1 EINVAL (Invalid argument)
munmap(0xf72c3000, 2097152) = 0
close(3) = 0
openat(AT_FDCWD, "/sys/class/net",
O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 3
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
getdents64(3, /* 4 entries */, 32768) = 96
lstat64("/sys/class/net/eth0/ifindex", {st_mode=S_IFREG|0444, st_size=4096,
...}) = 0
ioctl(4, SIOCGIFFLAGS, {ifr_name="eth0",
ifr_flags=IFF_UP|IFF_BROADCAST|IFF_RUNNING|IFF_MULTICAST}) = 0
lstat64("/sys/class/net/lo/ifindex", {st_mode=S_IFREG|0444, st_size=4096, ...})
= 0
ioctl(4, SIOCGIFFLAGS, {ifr_name="lo",
ifr_flags=IFF_UP|IFF_LOOPBACK|IFF_RUNNING}) = 0
getdents64(3, /* 0 entries */, 32768) = 0
close(4) = 0
close(3) = 0
socket(PF_PACKET, SOCK_DGRAM, 768) = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
setsockopt(3, SOL_PACKET, PACKET_AUXDATA, [1], 4) = 0
getsockopt(3, SOL_PACKET, PACKET_HDRLEN, [36], [4]) = 0
setsockopt(3, SOL_PACKET, PACKET_VERSION, [2], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RESERVE, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING,
"\0\0\2\0\20\0\0\0\0\0\2\0\20\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0", 28) = 0
mmap2(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0xf72c3000
setsockopt(3, SOL_PACKET, PACKET_RX_RING, {block_size=0, block_nr=0,
frame_size=0, frame_nr=0}, 16) = -1 EINVAL (Invalid argument)
munmap(0xf72c3000, 2097152) = 0
close(3) = 0
openat(AT_FDCWD, "/sys/bus/usb/devices",
O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|O_CLOEXEC) = 3
getdents64(3, /* 26 entries */, 32768) = 736
open("/dev/usbmon1", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or
directory)
open("/sys/kernel/debug/usb/usbmon/1t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
such file or directory)
open("/sys/kernel/debug/usbmon/1t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such
file or directory)
open("/dev/usbmon2", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or
directory)
open("/sys/kernel/debug/usb/usbmon/2t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
such file or directory)
open("/sys/kernel/debug/usbmon/2t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such
file or directory)
open("/dev/usbmon3", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or
directory)
open("/sys/kernel/debug/usb/usbmon/3t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
such file or directory)
open("/sys/kernel/debug/usbmon/3t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such
file or directory)
open("/dev/usbmon4", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or
directory)
open("/sys/kernel/debug/usb/usbmon/4t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
such file or directory)
open("/sys/kernel/debug/usbmon/4t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such
file or directory)
open("/dev/usbmon5", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or
directory)
open("/sys/kernel/debug/usb/usbmon/5t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
such file or directory)
open("/sys/kernel/debug/usbmon/5t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such
file or directory)
open("/dev/usbmon6", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or
directory)
open("/sys/kernel/debug/usb/usbmon/6t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
such file or directory)
open("/sys/kernel/debug/usbmon/6t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such
file or directory)
open("/dev/usbmon7", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or
directory)
open("/sys/kernel/debug/usb/usbmon/7t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
such file or directory)
open("/sys/kernel/debug/usbmon/7t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such
file or directory)
open("/dev/usbmon8", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or
directory)
open("/sys/kernel/debug/usb/usbmon/8t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No
such file or directory)
open("/sys/kernel/debug/usbmon/8t", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such
file or directory)
getdents64(3, /* 0 entries */, 32768) = 0
close(3) = 0
socket(PF_NETLINK, SOCK_RAW, 12) = 3
close(3) = 0
socket(PF_NETLINK, SOCK_RAW, 12) = 3
time(NULL) = 1388413817
sendto(3, "\34\0\0\0\1\4\5\0z\203\301R\0\0\0\0\2\0\0\0\5\0\1\0\4\0\0\0", 28, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(3,
"$\0\0\0\2\0\0\0z\203\301R\320)\0\0\0\0\0\0\34\0\0\0\1\4\5\0z\203\301R"...,
1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(3, "\34\0\0\0\1\4\5\0{\203\301R\0\0\0\0\2\0\0\0\5\0\1\0\3\4\5\0", 28, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(3,
"$\0\0\0\2\0\0\0{\203\301R\320)\0\0\0\0\0\0\34\0\0\0\1\4\5\0{\203\301R"...,
1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(3, "\34\0\0\0\1\4\5\0|\203\301R\0\0\0\0\0\0\0\0\5\0\1\0\1\4\5\0", 28, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(3,
"$\0\0\0\2\0\0\0|\203\301R\320)\0\0\0\0\0\0\34\0\0\0\1\4\5\0|\203\301R"...,
1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(3, "
\0\0\0\1\4\5\0}\203\301R\0\0\0\0\0\0\0\0\n\0\2\0\0\0\0D\2\0\377\377", 32, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 32
recvfrom(3, "$\0\0\0\2\0\0\0}\203\301R\320)\0\0\0\0\0\0
\0\0\0\1\4\5\0}\203\301R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0,
groups=00000000}, [12]) = 36
close(3) = 0
socket(PF_NETLINK, SOCK_RAW, 12) = 3
sendto(3, "\34\0\0\0\2\3\5\0~\203\301R\0\0\0\0\0\0\0\0\10\0\1\0\4\0\0\2", 28,
0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(3,
"$\0\0\0\2\0\0\0~\203\301R\320)\0\0\0\0\0\0\34\0\0\0\2\3\5\0~\203\301R"...,
1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(3, "\34\0\0\0\2\3\5\0\177\203\301R\0\0\0\0\0\0\0\0\10\0\1\0\3\0\0\2",
28, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(3,
"$\0\0\0\2\0\0\0\177\203\301R\320)\0\0\0\0\0\0\34\0\0\0\2\3\5\0\177\203\301R"...,
1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(3, "\34\0\0\0\2\3\5\0\200\203\301R\0\0\0\0\0\0\0\0\10\0\1\0\1\0\0\0",
28, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 28
recvfrom(3,
"$\0\0\0\2\0\0\0\200\203\301R\320)\0\0\0\0\0\0\34\0\0\0\2\3\5\0\200\203\301R"...,
1024, 0, {sa_family=AF_NETLINK, pid=0, groups=00000000}, [12]) = 36
sendto(3, "
\0\0\0\2\3\5\0\201\203\301R\0\0\0\0\0\0\0\0\t\0\2\0\0\0\0D\2\203\301R", 32, 0,
{sa_family=AF_NETLINK, pid=0, groups=00000000}, 12) = 32
recvfrom(3, "$\0\0\0\2\0\0\0\201\203\301R\320)\0\0\0\0\0\0
\0\0\0\2\3\5\0\201\203\301R"..., 1024, 0, {sa_family=AF_NETLINK, pid=0,
groups=00000000}, [12]) = 36
close(3) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 3
ioctl(3, SIOCGIFADDR, {ifr_name="eth0", ifr_addr={AF_INET,
inet_addr("172.16.8.20")}}) = 0
ioctl(3, SIOCGIFNETMASK, {ifr_name="eth0", ifr_netmask={AF_INET,
inet_addr("255.255.240.0")}}) = 0
close(3) = 0
chdir("/var/lib/arpwatch") = 0
open("/proc/net/dev", O_RDONLY|O_LARGEFILE) = 3
fstat64(3, {st_mode=S_IFREG|0444, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0xf76f8000
read(3, "Inter-| Receive "..., 1024) = 447
close(3) = 0
munmap(0xf76f8000, 4096) = 0
socket(PF_PACKET, SOCK_RAW, 768) = 3
ioctl(3, SIOCGIFINDEX, {ifr_name="lo", ifr_index=1}) = 0
ioctl(3, SIOCGIFHWADDR, {ifr_name="eth0", ifr_hwaddr=00:23:7d:4d:85:c7}) = 0
ioctl(3, SIOCGIFINDEX, {ifr_name="eth0", ifr_index=2}) = 0
bind(3, {sa_family=AF_PACKET, proto=0x03, if2, pkttype=PACKET_HOST, addr(0)={0,
}, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
setsockopt(3, SOL_PACKET, PACKET_ADD_MEMBERSHIP,
"\2\0\0\0\1\0\0\0\0\0\0\0\0\0\0\0", 16) = 0
setsockopt(3, SOL_PACKET, PACKET_AUXDATA, [1], 4) = 0
getsockopt(3, SOL_PACKET, PACKET_HDRLEN, [36], [4]) = 0
setsockopt(3, SOL_PACKET, PACKET_VERSION, [2], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RESERVE, [4], 4) = 0
setsockopt(3, SOL_PACKET, PACKET_RX_RING,
"\0\0\2\0\20\0\0\0\0\0\2\0\20\0\0\0\350\3\0\0\0\0\0\0\0\0\0\0", 28) = 0
mmap2(NULL, 2097152, PROT_READ|PROT_WRITE, MAP_SHARED, 3, 0) = 0xf72c3000
getgid32() = 0
setgid32(0) = 0
getuid32() = 0
setuid32(0) = 0
setsockopt(3, SOL_SOCKET, SO_ATTACH_FILTER, "\1\0\0\0\4\2k\367", 8) = 0
fcntl64(3, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0
recv(3, 0xfff53b07, 1, MSG_TRUNC) = -1 EAGAIN (Resource temporarily
unavailable)
fcntl64(3, F_SETFL, O_RDWR) = 0
setsockopt(3, SOL_SOCKET, SO_ATTACH_FILTER, "\5\0q\367\260c3\t", 8) = 0
time(NULL) = 1388413817
open("/etc/localtime", O_RDONLY|O_CLOEXEC) = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=1892, ...}) = 0
fstat64(4, {st_mode=S_IFREG|0644, st_size=1892, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0xf76f8000
read(4, "TZif2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\4\0\0\0\4\0\0\0\0"..., 4096)
= 1892
_llseek(4, -28, [1864], SEEK_CUR) = 0
read(4, "\nCET-1CEST,M3.5.0,M10.5.0/3\n", 4096) = 28
close(4) = 0
munmap(0xf76f8000, 4096) = 0
socket(PF_FILE, SOCK_DGRAM|SOCK_CLOEXEC, 0) = 4
connect(4, {sa_family=AF_FILE, path="/dev/log"}, 110) = 0
send(4, "<30>Dec 30 15:30:17 arpwatch: li"..., 47, MSG_NOSIGNAL) = 47
open("arp.dat", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0640, st_size=0, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0xf76f8000
read(5, "", 4096) = 0
close(5) = 0
munmap(0xf76f8000, 4096) = 0
open("/usr/share/arpwatch/ethercodes.dat", O_RDONLY) = 5
fstat64(5, {st_mode=S_IFREG|0644, st_size=371679, ...}) = 0
mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0xf76f8000
read(5, "0:0:0\tXEROX CORPORATION\n0:0:10\tS"..., 4096) = 4096
read(5, "f\tAMERISTAR TECHNOLOGIES INC.\n0:"..., 4096) = 4096
read(5, "INC.\n0:10:32\tALTA TECHNOLOGY\n0:1"..., 4096) = 4096
read(5, "ATION\n0:10:b6\tENTRATA COMMUNICAT"..., 4096) = 4096
read(5, "A INDUSTRY Co,.Ltd.\n0:11:4b\tFran"..., 4096) = 4096
read(5, " Technology Corporation\n0:11:c4\t"..., 4096) = 4096
read(5, "LLC.\n0:12:4\tu10 Networks, Inc.\n0"..., 4096) = 4096
read(5, "12:ce\tAdvanced Cybernetics Group"..., 4096) = 4096
read(5, "comax Technologies, Inc.\n0:13:55"..., 4096) = 4096
read(5, "TAR INTERNATIONAL CO., LTD.\n0:13"..., 4096) = 4096
read(5, ":14:62\tDigiwell Technology, inc\n"..., 4096) = 4096
read(5, "4:df\tHI-P Tech Corporation\n0:14:"..., 4096) = 4096
read(5, "sans Networks Corp.\n0:15:6c\tSANE"..., 4096) = 4096
read(5, "ty) Ltd\n0:1:5e\tBEST TECHNOLOGY C"..., 4096) = 4096
read(5, "poration\n0:16:77\tBihl+Wiedemann "..., 4096) = 4096
read(5, "AVIQTECH TECHNOLOGY CO., LTD.\n0:"..., 4096) = 4096
read(5, "17:87\tBrother, Brother & Sons Ap"..., 4096) = 4096
read(5, "csson Mobile Communications\n0:18"..., 4096) = 4096
read(5, "logies Inc.\n0:18:96\tGreat Well E"..., 4096) = 4096
read(5, "ystems\n0:19:1d\tNintendo Co.,Ltd."..., 4096) = 4096
read(5, "\n0:19:94\tJorjin Technologies Inc"..., 4096) = 4096
read(5, "ruba Networks\n0:1a:1f\tCoastal En"..., 4096) = 4096
read(5, "rmation Electronics Co., Ltd\n0:1"..., 4096) = 4096
read(5, "LTA - Danish Electronics, Light "..., 4096) = 4096
read(5, "\tSATEL sp. z o.o.\n0:1b:9d\tNovus "..., 4096) = 4096
read(5, " Ind. Co.,Ltd.\n0:1c:27\tSunell El"..., 4096) = 4096
read(5, "y Ericsson Mobile Communications"..., 4096) = 4096
read(5, "etrend Technologies (Pty) Limite"..., 4096) = 4096
read(5, ", LTD\n0:1d:a5\tWB Electronics\n0:1"..., 4096) = 4096
read(5, "ear Inc.\n0:1e:2b\tRadio Systems D"..., 4096) = 4096
brk(0x9385000) = 0x9385000
read(5, "\tArmadeus Systems\n0:1:ea\tCiriliu"..., 4096) = 4096
read(5, "Construcciones y Auxiliar de Fer"..., 4096) = 4096
read(5, "es Corp.\n0:1f:b8\tUniversal Remot"..., 4096) = 4096
read(5, "L BI0METRICS INC.\n0:20:3b\tWISDM "..., 4096) = 4096
read(5, "20:bf\tAEHR TEST SYSTEMS\n0:20:b\tO"..., 4096) = 4096
read(5, "smission Technology Com. Ltd.\n0:"..., 4096) = 4096
read(5, " Inc.\n0:21:cd\tLiveTV\n0:21:ce\tNTC"..., 4096) = 4096
read(5, "k India Pvt. Ltd.\n0:22:5e\tUwin T"..., 4096) = 4096
read(5, "roup Data Center Solutions - Pul"..., 4096) = 4096
read(5, "icon Micro Sensors GmbH\n0:2:35\tP"..., 4096) = 4096
read(5, "e, Inc\n0:23:d\tNortel Networks\n0:"..., 4096) = 4096
read(5, ", INC.\n0:24:6d\tWeinzierl Enginee"..., 4096) = 4096
read(5, "onics Co., Ltd., Storage System "..., 4096) = 4096
read(5, "jiang Tianle Digital Electric Co"..., 4096) = 4096
read(5, "C\n0:25:e5\tLG Electronics Inc\n0:2"..., 4096) = 4096
read(5, ",LTD.\n0:26:6f\tCoordiwise Technol"..., 4096) = 4096
read(5, "26:ea\tCheerchip Electronic Techn"..., 4096) = 4096
read(5, "Totsu Engineering, Inc.\n0:2:bf\td"..., 4096) = 4096
read(5, "\n0:30:56\tBeck IPC GmbH\n0:30:57\tQ"..., 4096) = 4096
read(5, "c.\n0:30:e0\tOXFORD SEMICONDUCTOR "..., 4096) = 4096
read(5, "Networks Corp.\n0:3:72\tULAN\n0:3:7"..., 4096) = 4096
read(5, "fc\tIntertex Data AB\n0:3:fd\tCisco"..., 4096) = 4096
read(5, " & RUBBER CO.\n0:40:8e\tDIGILOG, I"..., 4096) = 4096
read(5, "ku Instrumentation Co., Ltd.\n0:4"..., 4096) = 4096
read(5, "s NV\n0:4:a6\tSAF Tehnika Ltd.\n0:4"..., 4096) = 4096
read(5, "PORATION\n0:50:43\tMARVELL SEMICON"..., 4096) = 4096
read(5, ".\n0:50:d0\tMINERVA SYSTEMS\n0:50:d"..., 4096) = 4096
read(5, "td.\n0:5:66\tSecui.com Corporation"..., 4096) = 4096
mmap2(NULL, 135168, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
0xf76d7000
read(5, ":f0\tSATEC\n0:5:f1\tVrcom, Inc.\n0:5"..., 4096) = 4096
read(5, "3COM CORPORATION\n0:60:84\tDIGITAL"..., 4096) = 4096
read(5, "shiba Teli Corporation\n0:6:10\tAb"..., 4096) = 4096
read(5, "ent Networks\n0:6:97\tR & D Center"..., 4096) = 4096
read(5, "CNSystems\n0:7:2e\tNorth Node AB\n0"..., 4096) = 4096
read(5, " Systems Inc.\n0:7:b4\tCisco Syste"..., 4096) = 4096
read(5, "d\tCYCLONE MICROSYSTEMS, INC.\n0:8"..., 4096) = 4096
read(5, "ER PERIPHERALS, INC.\n0:80:d1\tKIM"..., 4096) = 4096
read(5, ":88\tOULLIM Information Technolog"..., 4096) = 4096
read(5, "ia (Electronic Systems) Pty Ltd\n"..., 4096) = 4096
read(5, " Ltd.\n0:90:a9\tWESTERN DIGITAL\n0:"..., 4096) = 4096
read(5, "ptics\n0:9:3b\tHYUNDAI NETWORKS IN"..., 4096) = 4096
read(5, ":9:bf\tNintendo Co.,Ltd.\n0:9:b\tMT"..., 4096) = 4096
read(5, "TRONICS PTY. LTD\n0:a0:53\tCOMPACT"..., 4096) = 4096
read(5, "EARCH\n0:a0:d8\tSPECTRA - TEK\n0:a0"..., 4096) = 4096
read(5, "\tEKS Elektronikservice GmbH\n0:a:"..., 4096) = 4096
read(5, "Co KG\n0:a:ee\tGCD Hard- & Softwar"..., 4096) = 4096
read(5, "escape\n0:b:64\tKieback & Peter Gm"..., 4096) = 4096
read(5, "oration\n0:b:ea\tZultys Technologi"..., 4096) = 4096
read(5, ".\n0:c0:7a\tPRIVA B.V.\n0:c0:7b\tASC"..., 4096) = 4096
read(5, "ARY COMMUNICATIONS, INC.\n0:c0:fb"..., 4096) = 4096
read(5, "\n0:c:8\tHUMEX Technologies Corp.\n"..., 4096) = 4096
read(5, "ELECTRONICS CORP.\n0:d0:22\tINCRED"..., 4096) = 4096
read(5, ".\n0:d0:a9\tSHINANO KENSHI CO., LT"..., 4096) = 4096
read(5, "i.Tech Dynamic Ltd\n0:d:3d\tHammer"..., 4096) = 4096
read(5, "Tone Sound & Signal Mfg., Inc.\n0"..., 4096) = 4096
read(5, "LE COMPUTERTECHNIK GmbH\n0:e0:4c\t"..., 4096) = 4096
read(5, "0:ce\tARN\n0:e0:cf\tINTEGRATED DEVI"..., 4096) = 4096
read(5, "ectronics Ltd.\n0:e:68\tE-TOP Netw"..., 4096) = 4096
read(5, "ndustrie BV\n0:e:e\tESA elettronic"..., 4096) = 4096
read(5, ":8b\tOrion MultiSystems Inc\n0:f:8"..., 4096) = 4096
read(5, ":8e\tCARDIAC RECORDERS INC.\n2:aa:"..., 4096) = 4096
read(5, "65\tGENRAD INC.\n8:0:66\tAGFA CORPO"..., 4096) = 3039
read(5, "", 4096) = 0
close(5) = 0
munmap(0xf76f8000, 4096) = 0
rt_sigaction(SIGINT, {0x804a2e0, [], 0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [INT], [], 8) = 0
rt_sigaction(SIGTERM, {0x804a2e0, [], 0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [TERM], [], 8) = 0
rt_sigaction(SIGHUP, {0x804a2e0, [], 0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [HUP], [], 8) = 0
rt_sigaction(SIGQUIT, {0x804a2a0, [], 0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [QUIT], [], 8) = 0
rt_sigaction(SIGALRM, {0x804a2a0, [], 0}, {SIG_DFL, [], 0}, 8) = 0
rt_sigprocmask(SIG_UNBLOCK, [ALRM], [], 8) = 0
alarm(900) = 0
poll([{fd=3, events=POLLIN}], 1, 1000) = 1 ([{fd=3, revents=POLLIN}])
poll([{fd=3, events=POLLIN}], 1, 1000) = 1 ([{fd=3, revents=POLLIN}])
