execve("/usr/sbin/syslog-ng", ["syslog-ng"], [/* 30 vars */]) = 0                         
brk(0)                                  = 0x8059524                                       
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or directory)           
open("/etc/ld.so.cache", O_RDONLY)      = 3                                               
fstat(3, {st_mode=S_IFREG|0644, st_size=20848, ...}) = 0                                  
old_mmap(NULL, 20848, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40014000                          
close(3)                                = 0                                               
open("/lib/libnsl.so.1", O_RDONLY)      = 3                                               
fstat(3, {st_mode=S_IFREG|0755, st_size=75500, ...}) = 0                                  
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\2709\0"..., 4096) = 4096         
old_mmap(NULL, 84136, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 
0x4001a000                
mprotect(0x4002b000, 14504, PROT_NONE)  = 0                                               
old_mmap(0x4002b000, 8192, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED, 3, 0x10000) = 0x40
02b000                                                                                    
old_mmap(0x4002d000, 6312, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 
0) = 0x4002d000                                                                           
close(3)                                = 0                                               
open("/lib/libc.so.6", O_RDONLY)        = 3                                               
fstat(3, {st_mode=S_IFREG|0755, st_size=1013224, ...}) = 0                                
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\250\206"..., 4096) = 4096        
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x4002f000 
old_mmap(NULL, 954492, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 
0x40030000               
mprotect(0x40112000, 28796, PROT_NONE)  = 0                                               
old_mmap(0x40112000, 16384, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED, 3, 0xe1000) = 0x4
0112000                                                                                   
old_mmap(0x40116000, 12412, PROT_READ|PROT_WRITE, 
MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1,
 0) = 0x40116000                                                                          
close(3)                                = 0                                               
mprotect(0x40030000, 925696, PROT_READ|PROT_WRITE) = 0                                    
mprotect(0x40030000, 925696, PROT_READ|PROT_EXEC) = 0                                     
munmap(0x40014000, 20848)               = 0                                               
personality(PER_LINUX)                  = 0                                               
getpid()                                = 26738                                           
brk(0)                                  = 0x8059524                                       
brk(0x8059574)                          = 0x8059574                                       
brk(0x805a000)                          = 0x805a000                                       
open("/etc/syslog-ng/syslog-ng.conf", O_RDONLY) = 3                                       
brk(0x805f000)                          = 0x805f000                                       
ioctl(3, TCGETS, 0xbffff734)            = -1 ENOTTY (Inappropriate ioctl for device)      
read(3, "\noptions { dir_perm(0755); perm("..., 8192) = 1260                              
read(3, "", 6932)                       = 0                                               
read(3, "", 8192)                       = 0                                               
ioctl(3, TCGETS, 0xbffff208)            = -1 ENOTTY (Inappropriate ioctl for device)      
close(3)                                = 0                                               
fork()                                  = 26739                                           
rt_sigaction(SIGTERM, {0x8049a0c, [], SA_RESTART|0x4000000}, {SIG_DFL}, 8) = 
0            
pause()                                 = ? ERESTARTNOHAND (To be restarted)              
--- SIGTERM (Terminated) ---                                                              
rt_sigaction(SIGTERM, {0x8049a0c, [], SA_RESTART|0x4000000}, {0x8049a0c, [], 
SA_RESTART|0x
4000000}, 8) = 0                                                                          
sigreturn()                             = ? (mask now [])                                 
_exit(0)                                = ?                                               
                                                                                          
[root@bone:/root]