execve("/bin/mail", ["mail", "phil"], [/* 39 vars */]) = 0 uname({sys="Linux", node="thrall", ...}) = 0 brk(0) = 0x8065c18 open("/etc/ld.so.preload", O_RDONLY) = -1 ENOENT (No such file or directory) open("/etc/ld.so.cache", O_RDONLY) = 3 fstat64(3, {st_mode=S_IFREG|0644, st_size=23222, ...}) = 0 mmap2(NULL, 23222, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40000000 close(3) = 0 open("/lib/libc.so.6", O_RDONLY) = 3 read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0pYVE4\0"..., 512) = 512 fstat64(3, {st_mode=S_IFREG|0755, st_size=1213064, ...}) = 0 mmap2(0x45550000, 1136196, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x45550000 mmap2(0x45660000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x110) = 0x45660000 mmap2(0x45663000, 9796, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x45663000 close(3) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40006000 munmap(0x40000000, 23222) = 0 open("/dev/urandom", O_RDONLY) = 3 read(3, "\17\'\314\251", 4) = 4 close(3) = 0 getegid32() = 10 getgid32() = 10 setgid32(10) = 0 rt_sigaction(SIGCHLD, {0x8057e08, [CHLD], SA_RESTORER|SA_RESTART, 0x4557a018}, {SIG_DFL}, 8) = 0 ioctl(0, SNDCTL_TMR_TIMEBASE or TCGETS, 0xbffff14c) = -1 EINVAL (Invalid argument) brk(0) = 0x8065c18 brk(0x8086c18) = 0x8086c18 brk(0) = 0x8086c18 brk(0x8087000) = 0x8087000 stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=12288, ...}) = 0 gettimeofday({1087324254, 591611}, NULL) = 0 getpid() = 9575 lstat64("/tmp/RsRroxZA", 0xbfffe108) = -1 ENOENT (No such file or directory) stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=12288, ...}) = 0 getpid() = 9575 lstat64("/tmp/Rqlllelk", 0xbfffe108) = -1 ENOENT (No such file or directory) stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=12288, ...}) = 0 getpid() = 9575 lstat64("/tmp/RmTuhWG3", 0xbfffe108) = -1 ENOENT (No such file or directory) stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=12288, ...}) = 0 getpid() = 9575 lstat64("/tmp/Rep9gF2M", 0xbfffe108) = -1 ENOENT (No such file or directory) stat64("/tmp/", {st_mode=S_IFDIR|S_ISVTX|0777, st_size=12288, ...}) = 0 getpid() = 9575 lstat64("/tmp/RxDbbpow", 0xbfffe108) = -1 ENOENT (No such file or directory) ioctl(1, TIOCGWINSZ, {ws_row=24, ws_col=80, ws_xpixel=0, ws_ypixel=0}) = 0 ioctl(1, SNDCTL_TMR_TIMEBASE or TCGETS, {B38400 opost isig icanon echo ...}) = 0 open("/etc/mail.rc", O_RDONLY) = 3 fcntl64(3, F_GETFL) = 0 (flags O_RDONLY) fstat64(3, {st_mode=S_IFREG|0644, st_size=112, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40000000 _llseek(3, 0, [0], SEEK_CUR) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 read(3, "set ask askcc append dot save cr"..., 4096) = 112 read(3, "", 4096) = 0 close(3) = 0 munmap(0x40000000, 4096) = 0 open("/home/phil/.mailrc", O_RDONLY) = -1 ENOENT (No such file or directory) rt_sigprocmask(SIG_BLOCK, [HUP INT], [], 8) = 0 rt_sigaction(SIGINT, {SIG_IGN}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGINT, {0x8050490, [INT], SA_RESTORER|SA_RESTART, 0x4557a018}, {SIG_IGN}, 8) = 0 rt_sigaction(SIGHUP, {SIG_IGN}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGHUP, {0x8050560, [HUP], SA_RESTORER|SA_RESTART, 0x4557a018}, {SIG_IGN}, 8) = 0 rt_sigaction(SIGTSTP, {0x8050384, [TSTP], SA_RESTORER|SA_RESTART, 0x4557a018}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTOU, {0x8050384, [TTOU], SA_RESTORER|SA_RESTART, 0x4557a018}, {SIG_DFL}, 8) = 0 rt_sigaction(SIGTTIN, {0x8050384, [TTIN], SA_RESTORER|SA_RESTART, 0x4557a018}, {SIG_DFL}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 open("/tmp/RsRroxZA", O_RDWR|O_CREAT|O_EXCL, 0666) = 3 fcntl64(3, F_GETFL) = 0x2 (flags O_RDWR) fstat64(3, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40000000 _llseek(3, 0, [0], SEEK_CUR) = 0 fcntl64(3, F_SETFD, FD_CLOEXEC) = 0 unlink("/tmp/RsRroxZA") = 0 fstat64(0, {st_mode=S_IFIFO|0600, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40001000 read(0, "test\n", 4096) = 5 read(0, "", 4096) = 0 write(3, "test\n", 5) = 5 _llseek(3, 0, [0], SEEK_SET) = 0 rt_sigprocmask(SIG_BLOCK, [HUP INT], NULL, 8) = 0 rt_sigaction(SIGINT, {SIG_DFL}, {0x8050490, [INT], SA_RESTORER|SA_RESTART, 0x4557a018}, 8) = 0 rt_sigaction(SIGHUP, {SIG_DFL}, {0x8050560, [HUP], SA_RESTORER|SA_RESTART, 0x4557a018}, 8) = 0 rt_sigaction(SIGTSTP, {SIG_DFL}, {0x8050384, [TSTP], SA_RESTORER|SA_RESTART, 0x4557a018}, 8) = 0 rt_sigaction(SIGTTOU, {SIG_DFL}, {0x8050384, [TTOU], SA_RESTORER|SA_RESTART, 0x4557a018}, 8) = 0 rt_sigaction(SIGTTIN, {SIG_DFL}, {0x8050384, [TTIN], SA_RESTORER|SA_RESTART, 0x4557a018}, 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 fstat64(3, {st_mode=S_IFREG|0644, st_size=5, ...}) = 0 time([1087324254]) = 1087324254 open("/etc/localtime", O_RDONLY) = 4 fstat64(4, {st_mode=S_IFREG|0644, st_size=837, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40002000 read(4, "TZif\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\10\0\0\0\10"..., 4096) = 837 close(4) = 0 munmap(0x40002000, 4096) = 0 open("/tmp/RsRroxZA", O_WRONLY|O_CREAT|O_EXCL, 0666) = 4 fcntl64(4, F_GETFL) = 0x1 (flags O_WRONLY) fstat64(4, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40002000 _llseek(4, 0, [0], SEEK_CUR) = 0 fcntl64(4, F_SETFD, FD_CLOEXEC) = 0 open("/tmp/RsRroxZA", O_RDONLY) = 5 fcntl64(5, F_GETFL) = 0 (flags O_RDONLY) fstat64(5, {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 mmap2(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40003000 _llseek(5, 0, [0], SEEK_CUR) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 stat64("/tmp/RsRroxZA", {st_mode=S_IFREG|0644, st_size=0, ...}) = 0 unlink("/tmp/RsRroxZA") = 0 read(3, "test\n", 4096) = 5 read(3, "", 4096) = 0 write(4, "To: phil\n\ntest\n", 15) = 15 close(4) = 0 munmap(0x40002000, 4096) = 0 close(3) = 0 munmap(0x40000000, 4096) = 0 _llseek(5, 0, [0], SEEK_SET) = 0 fork() = 9576 rt_sigprocmask(SIG_BLOCK, [CHLD], [], 8) = 0 rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 close(5) = 0 munmap(0x40003000, 4096) = 0 exit_group(0) = ?