command-line-murders/i-0233d976c6d24ff77
by SadServersMore by SadServers
Here, the second and the third argument of open(2) are decoded by breakin traditional or native usage differs from ANSI or POSIX, the latter forms Structure pointers are dereferenced and the members are displayed as ap mand "ls -l /dev/null" is captured as: lstat("/dev/null", {st_mode=S_IFCHR|0666, st_rdev=makedev(0x1, 0x3), Notice how the 'struct stat' argument is dereferenced and how each member and numeric values. Also notice in this example that the first argument the system call fails, arguments may not always be dereferenced. For exa lstat("/foo/bar", 0xb004) = -1 ENOENT (No such file or directory) Manual page strace(1) line 17 (press h for help or q to quit)
kihei/i-01b77bb37a0d39570 00:21
by SadServersdrwxr-xr-x 2 admin root 4.0K Oct 26 12:42 data -rw-r--r-- 1 admin admin 5.0M Sep 17 17:28 datafile.gz -rwxr-xr-x 1 admin root 2.2M Sep 17 17:28 kihei admin@i-0dabf03a12f2ad847:~$ df -h Filesystem Size Used Avail Use% Mounted on udev 217M 0 217M 0% /dev tmpfs 46M 368K 46M 1% /run /dev/nvme0n1p1 7.7G 1.1G 6.2G 15% / tmpfs 228M 12K 228M 1% /dev/shm tmpfs 5.0M 0 5.0M 0% /run/lock /dev/nvme0n1p15 124M 5.9M 118M 5% /boot/efi admin@i-0dabf03a12f2ad847:~$ ./kihei Done. admin@i-0dabf03a12f2ad847:~$ mv datafile.gz datafile admin@i-0dabf03a12f2ad847:~$ strace ./k
kihei/i-0dabf03a12f2ad847 07:26
by SadServers-upgrades/unattended-upgrade-shutdown -- root 685 0.0 0.0 0 0 ? I 04:20 0:00 [kworker/1:4-admin 687 0.0 0.9 6740 4512 pts/0 S<s+ 04:20 0:00 bash -l admin 691 0.5 4.1 98188 19348 pts/0 S<l+ 04:20 0:00 /usr/bin/pythc -t paris/i-0cea73f15d68f034f -q -i 2 / admin 694 0.0 3.0 24456 14436 pts/0 S<+ 04:20 0:00 /usr/bin/pythc -t paris/i-0cea73f15d68f034f -q -i 2 / admin 695 0.0 0.1 2480 572 pts/1 S<s 04:20 0:00 sh -c /bin/baadmin 696 0.0 1.0 6952 4724 pts/1 S< 04:20 0:00 /bin/bash admin 709 0.0 0.6 8648 3240 pts/1 R<+ 04:20 0:00 ps aux admin@i-0cea73f15d68f034f:~$ ps aux|grep -i web root 574 0.5 6.0 107132 28320 ? Ss 04:20 0:00 /usr/bin/pyth.py admin 712 0.0 0.1 5132 640 pts/1 S<+ 04:20 0:00 grep -i web admin@i-0cea73f15d68f034f:~$