[syslog-ng] No line break every so often
Mike Tremaine
mgt at stellarcore.net
Fri May 20 21:14:11 CEST 2005
On Fri, 2005-05-20 at 04:49, Balazs Scheidler wrote:
> If your log volume is bearable, it would help if you could attach strace
> to the syslog-ng process with a large -s parameter while a broken
> message is received. e.g. something like:
>
> strace -s 4096 -o syslog-ng.trace -p <syslog-ngpid>
>
> That would help to identify whether syslog-ng or sendmail is at fault.
>
> Standard syslogd uses unix-dgram sockets, but if sendmail uses the
> standard syslog() routines from libc it should simply work with
> unix-stream() as well.
Luckly it is... Attached is a trimmed down trace file with a few
examples of the problem [about 200lines let me know if more would be
useful...]
To my [uneducated] eye it looks like sendmail is the problem but like I
said sometimes it does it right sometime it doesn't.
Example:
read(16, "<20>May 20 07:48:02 sendmail[16668]: j4KEkWOv016668: collect:
premature EOM: unexpected close", 2048) = 93
Notice no \0 or \n
Then the next read
read(16, "<21>May 20 07:48:02 sendmail[16668]: j4KEkWOv016668: collect:
unexpected close on connection from [61.43.165.161],
sender=<Hager at indiatimes.com>\0<22>May 20 07:48:02 sendmail[16668]:
j4KEkWOv016668: from=<Hager at indiatimes.com>, size=0, class=0, nrcpts=1,
proto=SMTP, daemon=MTA, relay=[61.43.165.161]\0", 1955) = 300
A null terminator
That leads to the output
write(22, "2005-05-20 07:48:02 quasar mail.warning sendmail[16668]:
j4KEkWOv016668: collect: premature EOM: unexpected close<21>May 20
07:48:02 sendmail[16668]: j4KEkWOv016668: collect: unexpected close on
connection from [61.43.165.161],
sender=<Hager at indiatimes.com>\n2005-05-20 07:48:02 quasar mail.info
sendmail[16668]: j4KEkWOv016668: from=<Hager at indiatimes.com>, size=0,
class=0, nrcpts=1, proto=SMTP, daemon=MTA, relay=[61.43.165.161]\n",
430) = 430
So the null was caught and turned into \n but the line before it runs
together. With some weird <21> [and more often <22> see trace file].
`
--
Mike Tremaine
mgt at stellarcore.net
http://www.stellarcore.net
-------------- next part --------------
read(16, "", 2048) = 0
time(NULL) = 1116600407
poll([{fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=0}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN, revents=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 21, 100) = 2
read(8, "<86>May 20 07:46:47 xinetd[616]: EXIT: pop3 pid=16672 duration=0(sec)\0", 2048) = 70
time(NULL) = 1116600407
time(NULL) = 1116600407
time(NULL) = 1116600407
time(NULL) = 1116600407
close(16) = 0
poll([{fd=22, events=POLLOUT, revents=POLLOUT}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=POLLOUT, revents=POLLOUT}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 2
write(22, "2005-05-20 07:46:47 quasar authpriv.info xinetd[616]: EXIT: pop3 pid=16672 duration=0(sec)\n", 91) = 91
write(11, "May 20 07:46:47 quasar xinetd[616]: EXIT: pop3 pid=16672 duration=0(sec)\n", 73) = 73
time(NULL) = 1116600407
poll([{fd=22, events=0}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 0
poll([{fd=22, events=0}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 4000) = 0
time(NULL) = 1116600411
poll([{fd=22, events=0}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 0
poll([{fd=22, events=0}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 0) = 0
time(NULL) = 1116600412
poll([{fd=22, events=0}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 0
poll([{fd=22, events=0}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 55000) = 0
time(NULL) = 1116600467
close(23) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 0) = 0
time(NULL) = 1116600467
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN, revents=POLLIN}, {fd=3, events=POLLIN}], 19, 450000) = 1
accept(5, {sa_family=AF_UNIX, path=@}, [2]) = 16
fcntl64(16, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(16, F_SETFL, O_RDWR|O_NONBLOCK) = 0
fcntl64(16, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600482
close(22) = 0
poll([{fd=16, events=POLLIN, revents=POLLIN}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 1
read(16, "<20>May 20 07:48:02 sendmail[16668]: j4KEkWOv016668: collect: premature EOM: unexpected close", 2048) = 93
time(NULL) = 1116600482
poll([{fd=16, events=POLLIN, revents=POLLIN}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 1
read(16, "<21>May 20 07:48:02 sendmail[16668]: j4KEkWOv016668: collect: unexpected close on connection from [61.43.165.161], sender=<Hager at indiatimes.com>\0<22>May 20 07:48:02 sendmail[16668]: j4KEkWOv016668: from=<Hager at indiatimes.com>, size=0, class=0, nrcpts=1, proto=SMTP, daemon=MTA, relay=[61.43.165.161]\0", 1955) = 300
time(NULL) = 1116600482
time(NULL) = 1116600482
open("/home/centrilog/logs/rawlog_20050520-0748.logs", O_WRONLY|O_NONBLOCK|O_APPEND|O_CREAT|O_NOCTTY|O_LARGEFILE, 0640) = 22
chown32(0x8074a90, 0x20c, 0x20e) = 0
chmod("/home/centrilog/logs/rawlog_20050520-0748.logs", 0640) = 0
fcntl64(22, F_GETFL) = 0x8c01 (flags O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE)
fcntl64(22, F_SETFL, O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE) = 0
fcntl64(22, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600482
time(NULL) = 1116600482
time(NULL) = 1116600482
time(NULL) = 1116600482
time(NULL) = 1116600482
time(NULL) = 1116600482
poll([{fd=22, events=POLLOUT, revents=POLLOUT}, {fd=16, events=POLLIN}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
write(22, "2005-05-20 07:48:02 quasar mail.warning sendmail[16668]: j4KEkWOv016668: collect: premature EOM: unexpected close<21>May 20 07:48:02 sendmail[16668]: j4KEkWOv016668: collect: unexpected close on connection from [61.43.165.161], sender=<Hager at indiatimes.com>\n2005-05-20 07:48:02 quasar mail.info sendmail[16668]: j4KEkWOv016668: from=<Hager at indiatimes.com>, size=0, class=0, nrcpts=1, proto=SMTP, daemon=MTA, relay=[61.43.165.161]\n", 430) = 430
time(NULL) = 1116600482
poll([{fd=22, events=0}, {fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
read(16, "", 2048) = 0
time(NULL) = 1116600482
poll([{fd=22, events=0}, {fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
time(NULL) = 1116600482
close(16) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 60000) = 0
time(NULL) = 1116600542
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 0) = 0
time(NULL) = 1116600542
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN, revents=POLLIN}, {fd=3, events=POLLIN}], 19, 375000) = 1
accept(5, {sa_family=AF_UNIX, path=@}, [2]) = 16
fcntl64(16, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(16, F_SETFL, O_RDWR|O_NONBLOCK) = 0
fcntl64(16, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600600
close(22) = 0
poll([{fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN, revents=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 2
read(16, "<78>May 20 07:50:00 CROND[16677]: (root) CMD (/usr/lib/sa/sa1 1 1)\n", 2048) = 67
time(NULL) = 1116600600
time(NULL) = 1116600600
open("/home/centrilog/logs/rawlog_20050520-0750.logs", O_WRONLY|O_NONBLOCK|O_APPEND|O_CREAT|O_NOCTTY|O_LARGEFILE, 0640) = 22
chown32(0x80745b0, 0x20c, 0x20e) = 0
chmod("/home/centrilog/logs/rawlog_20050520-0750.logs", 0640) = 0
fcntl64(22, F_GETFL) = 0x8c01 (flags O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE)
fcntl64(22, F_SETFL, O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE) = 0
fcntl64(22, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600600
time(NULL) = 1116600600
accept(5, {sa_family=AF_UNIX, path=@}, [2]) = 23
fcntl64(23, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(23, F_SETFL, O_RDWR|O_NONBLOCK) = 0
fcntl64(23, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600600
poll([{fd=23, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=POLLOUT, revents=POLLOUT}, {fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=POLLOUT, revents=POLLOUT}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 21, 100) = 4
read(23, "<78>May 20 07:50:00 CROND[16680]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg)\n", 2048) = 80
time(NULL) = 1116600600
time(NULL) = 1116600600
time(NULL) = 1116600600
write(22, "2005-05-20 07:50:00 quasar cron.info CROND[16677]: (root) CMD (/usr/lib/sa/sa1 1 1)\n2005-05-20 07:50:00 quasar cron.info CROND[16680]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg)\n", 181) = 181
read(16, "", 2048) = 0
write(13, "May 20 07:50:00 quasar CROND[16677]: (root) CMD (/usr/lib/sa/sa1 1 1)\nMay 20 07:50:00 quasar CROND[16680]: (root) CMD (/usr/bin/mrtg /etc/mrtg/mrtg.cfg)\n", 153) = 153
time(NULL) = 1116600600
poll([{fd=23, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=0}, {fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 21, 100) = 2
read(23, "", 2048) = 0
time(NULL) = 1116600600
close(16) = 0
poll([{fd=23, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
time(NULL) = 1116600600
close(23) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN, revents=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 1
accept(5, {sa_family=AF_UNIX, path=@}, [2]) = 16
fcntl64(16, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(16, F_SETFL, O_RDWR|O_NONBLOCK) = 0
fcntl64(16, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600600
poll([{fd=16, events=POLLIN, revents=POLLIN}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
read(16, "<78>May 20 07:50:00 CROND[16684]: (centrilog) CMD (/home/centrilog/bin/centrilog_roller.sh)\n", 2048) = 92
time(NULL) = 1116600600
time(NULL) = 1116600600
time(NULL) = 1116600600
time(NULL) = 1116600600
poll([{fd=16, events=POLLIN}, {fd=22, events=POLLOUT, revents=POLLOUT}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=POLLOUT, revents=POLLOUT}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 2
write(22, "2005-05-20 07:50:00 quasar cron.info CROND[16684]: (centrilog) CMD (/home/centrilog/bin/centrilog_roller.sh)\n", 109) = 109
write(13, "May 20 07:50:00 quasar CROND[16684]: (centrilog) CMD (/home/centrilog/bin/centrilog_roller.sh)\n", 95) = 95
time(NULL) = 1116600600
poll([{fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
read(16, "", 2048) = 0
time(NULL) = 1116600600
poll([{fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
time(NULL) = 1116600600
close(16) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN, revents=POLLIN}, {fd=3, events=POLLIN}], 19, 60000) = 1
accept(5, {sa_family=AF_UNIX, path=@}, [2]) = 16
fcntl64(16, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(16, F_SETFL, O_RDWR|O_NONBLOCK) = 0
fcntl64(16, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600600
poll([{fd=16, events=POLLIN, revents=POLLIN}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
read(16, "<78>May 20 07:50:00 CROND[16682]: (mailman) CMD (/usr/bin/python -S /var/mailman/cron/gate_news)\n", 2048) = 97
time(NULL) = 1116600600
time(NULL) = 1116600600
time(NULL) = 1116600600
time(NULL) = 1116600600
poll([{fd=16, events=POLLIN}, {fd=22, events=POLLOUT, revents=POLLOUT}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=POLLOUT, revents=POLLOUT}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 2
write(22, "2005-05-20 07:50:00 quasar cron.info CROND[16682]: (mailman) CMD (/usr/bin/python -S /var/mailman/cron/gate_news)\n", 114) = 114
write(13, "May 20 07:50:00 quasar CROND[16682]: (mailman) CMD (/usr/bin/python -S /var/mailman/cron/gate_news)\n", 100) = 100
time(NULL) = 1116600600
poll([{fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
read(16, "", 2048) = 0
time(NULL) = 1116600600
poll([{fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
time(NULL) = 1116600600
close(16) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN, revents=POLLIN}, {fd=3, events=POLLIN}], 19, 60000) = 1
accept(5, {sa_family=AF_UNIX, path=@}, [2]) = 16
fcntl64(16, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(16, F_SETFL, O_RDWR|O_NONBLOCK) = 0
fcntl64(16, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600612
poll([{fd=16, events=POLLIN, revents=POLLIN}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
read(16, "<21>May 20 07:50:12 sendmail[16723]: j4KEo4tn016723: <dudaschris at roiassociates.com>... No such user here", 2048) = 104
time(NULL) = 1116600612
poll([{fd=16, events=POLLIN}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 0
poll([{fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 48000) = 1
read(16, "<22>May 20 07:50:12 sendmail[16723]: j4KEo4tn016723: from=<xmmhzc at yahoo.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[84.73.23.126]\0", 1944) = 150
time(NULL) = 1116600612
time(NULL) = 1116600612
time(NULL) = 1116600612
time(NULL) = 1116600612
poll([{fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=POLLOUT, revents=POLLOUT}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=POLLOUT, revents=POLLOUT}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 3
read(16, "", 2048) = 0
write(22, "2005-05-20 07:50:12 quasar mail.notice sendmail[16723]: j4KEo4tn016723: <dudaschris at roiassociates.com>... No such user here<22>May 20 07:50:12 sendmail[16723]: j4KEo4tn016723: from=<xmmhzc at yahoo.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[84.73.23.126]\n", 273) = 273
write(9, "May 20 07:45:41 quasar MailScanner[16099]: Spam Checks: Found 1 spam messages\nMay 20 07:45:43 quasar MailScanner[16099]: Virus and Content Scanning: Starting\nMay 20 07:45:51 quasar ipop3d[16596]: pop3 service init from 172.31.42.5\nMay 20 07:45:51 quasar ipop3d[16596]: Login user=mgt host=dwarfstar.stellarcore.net [172.31.42.5] nmsgs=0/0\nMay 20 07:45:51 quasar ipop3d[16596]: Logout user=mgt host=dwarfstar.stellarcore.net [172.31.42.5] nmsgs=0 ndele=0\nMay 20 07:46:47 quasar ipop3d[16672]: pop3 service init from 172.31.42.5\nMay 20 07:46:47 quasar ipop3d[16672]: Login user=mgt host=dwarfstar.stellarcore.net [172.31.42.5] nmsgs=0/0\nMay 20 07:46:47 quasar ipop3d[16672]: Logout user=mgt host=dwarfstar.stellarcore.net [172.31.42.5] nmsgs=0 ndele=0\nMay 20 07:48:02 quasar sendmail[16668]: j4KEkWOv016668: collect: premature EOM: unexpected close<21>May 20 07:48:02 sendmail[16668]: j4KEkWOv016668: collect: unexpected close on connection from [61.43.165.161], sender=<Hager at indiatimes.com>\nMay 20 07:48:02 quasar sendmail[16668]: j4KEkWOv016668: from=<Hager at indiatimes.com>, size=0, class=0, nrcpts=1, proto=SMTP, daemon=MTA, relay=[61.43.165.161]\nMay 20 07:50:12 quasar sendmail[16723]: j4KEo4tn016723: <dudaschris at roiassociates.com>... No such user here<22>May 20 07:50:12 sendmail[16723]: j4KEo4tn016723: from=<xmmhzc at yahoo.com>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=[84.73.23.126]\n", 1406) = 1406
time(NULL) = 1116600612
poll([{fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
time(NULL) = 1116600612
close(16) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 60000) = 0
time(NULL) = 1116600672
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 0) = 0
time(NULL) = 1116600672
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN, revents=POLLIN}, {fd=3, events=POLLIN}], 19, 245000) = 1
accept(5, {sa_family=AF_UNIX, path=@}, [2]) = 16
fcntl64(16, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(16, F_SETFL, O_RDWR|O_NONBLOCK) = 0
fcntl64(16, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600764
close(22) = 0
poll([{fd=16, events=POLLIN, revents=POLLIN}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 1
read(16, "<22>May 20 07:52:44 sendmail[16726]: j4KEqWxt016726: from=<bmorse_ai at tvt-postproduction.de>, size=1042, class=0, nrcpts=1, msgid=<45b501c55dd4$9d5eadda$7c0dbf53 at cin.nl>, proto=SMTP, daemon=MTA, relay=[210.77.106.9]<22>May 20 07:52:44 sendmail[16726]: j4KEqWxt016726: Milter add: header: Received-SPF: none (quasar.stellarcore.net: 210.77.106.9 is neither permitted nor denied by domain of tvt-postproduction.de) receiver=quasar.stellarcore.net; client-ip=210.77.106.9; helo=cin.nl; envelope-from=bmorse_ai at tvt-postproduction.de; x-software=spfmilter 0.93 http://www.acme.com/software/spfmilter/;\0<22>May 20 07:52:44 sendmail[16726]: j4KEqWxt016726: to=<webmaster at adeptus.com>, delay=00:00:01, mailer=smtp, pri=31042, stat=queued\0", 2048) = 729
time(NULL) = 1116600764
time(NULL) = 1116600764
open("/home/centrilog/logs/rawlog_20050520-0752.logs", O_WRONLY|O_NONBLOCK|O_APPEND|O_CREAT|O_NOCTTY|O_LARGEFILE, 0640) = 22
chown32(0x8074b60, 0x20c, 0x20e) = 0
chmod("/home/centrilog/logs/rawlog_20050520-0752.logs", 0640) = 0
fcntl64(22, F_GETFL) = 0x8c01 (flags O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE)
fcntl64(22, F_SETFL, O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE) = 0
fcntl64(22, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600764
time(NULL) = 1116600764
time(NULL) = 1116600764
time(NULL) = 1116600764
time(NULL) = 1116600764
time(NULL) = 1116600764
poll([{fd=22, events=POLLOUT, revents=POLLOUT}, {fd=16, events=POLLIN}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
write(22, "2005-05-20 07:52:44 quasar mail.info sendmail[16726]: j4KEqWxt016726: from=<bmorse_ai at tvt-postproduction.de>, size=1042, class=0, nrcpts=1, msgid=<45b501c55dd4$9d5eadda$7c0dbf53 at cin.nl>, proto=SMTP, daemon=MTA, relay=[210.77.106.9]<22>May 20 07:52:44 sendmail[16726]: j4KEqWxt016726: Milter add: header: Received-SPF: none (quasar.stellarcore.net: 210.77.106.9 is neither permitted nor denied by domain of tvt-postproduction.de) receiver=quasar.stellarcore.net; client-ip=210.77.106.9; helo=cin.nl; envelope-from=bmorse_ai at tvt-postproduction.de; x-software=spfmilter 0.93 http://www.acme.com/software/spfmilter/;\n2005-05-20 07:52:44 quasar mail.info sendmail[16726]: j4KEqWxt016726: to=<webmaster at adeptus.com>, delay=00:00:01, mailer=smtp, pri=31042, stat=queued\n", 763) = 763
time(NULL) = 1116600764
poll([{fd=22, events=0}, {fd=16, events=POLLIN}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 0
poll([{fd=22, events=0}, {fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 60000) = 1
read(16, "", 2048) = 0
time(NULL) = 1116600768
poll([{fd=22, events=0}, {fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
time(NULL) = 1116600768
close(16) = 0
poll([{fd=22, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN, revents=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 1
read(19, "<22>MailScanner[16106]: New Batch: Scanning 1 messages, 1774 bytes\n\0", 2048) = 68
time(NULL) = 1116600768
time(NULL) = 1116600973
close(16) = 0
poll([{fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 19, 100) = 0
poll([{fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN, revents=POLLIN}, {fd=3, events=POLLIN}], 19, 38000) = 1
accept(5, {sa_family=AF_UNIX, path=@}, [2]) = 16
fcntl64(16, F_GETFL) = 0x2 (flags O_RDWR)
fcntl64(16, F_SETFL, O_RDWR|O_NONBLOCK) = 0
fcntl64(16, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600983
poll([{fd=16, events=POLLIN, revents=POLLIN}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 1
read(16, "<22>May 20 07:56:22 sendmail[16786]: j4KEuFrl016786: from=<aliaqldfkzqmk at arcitekt.com>, size=4649, class=0, nrcpts=1, msgid=<851499361789.KIS78503 at anyone.1010010.org>, proto=SMTP, daemon=MTA, relay=d033069.adsl.hansenet.de [80.171.33.69]<22>May 20 07:56:23 sendmail[16786]: j4KEuFrl016786: Milter add: header: Received-SPF: neutral (quasar.stellarcore.net: 80.171.33.69 is neither permitted nor denied by domain of arcitekt.com) receiver=quasar.stellarcore.net; client-ip=80.171.33.69; helo=d033069.adsl.hansenet.de; envelope-from=aliaqldfkzqmk at arcitekt.com; x-software=spfmilter 0.93 http://www.acme.com/software/spfmilter/;\0", 2048) = 626
time(NULL) = 1116600983
time(NULL) = 1116600983
open("/home/centrilog/logs/rawlog_20050520-0756.logs", O_WRONLY|O_NONBLOCK|O_APPEND|O_CREAT|O_NOCTTY|O_LARGEFILE, 0640) = 22
chown32(0x807e028, 0x20c, 0x20e) = 0
chmod("/home/centrilog/logs/rawlog_20050520-0756.logs", 0640) = 0
fcntl64(22, F_GETFL) = 0x8c01 (flags O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE)
fcntl64(22, F_SETFL, O_WRONLY|O_NONBLOCK|O_APPEND|O_LARGEFILE) = 0
fcntl64(22, F_SETFD, FD_CLOEXEC) = 0
time(NULL) = 1116600983
time(NULL) = 1116600983
time(NULL) = 1116600983
poll([{fd=22, events=POLLOUT, revents=POLLOUT}, {fd=16, events=POLLIN}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 21, 100) = 1
write(22, "2005-05-20 07:56:22 quasar mail.info sendmail[16786]: j4KEuFrl016786: from=<aliaqldfkzqmk at arcitekt.com>, size=4649, class=0, nrcpts=1, msgid=<851499361789.KIS78503 at anyone.1010010.org>, proto=SMTP, daemon=MTA, relay=d033069.adsl.hansenet.de [80.171.33.69]<22>May 20 07:56:23 sendmail[16786]: j4KEuFrl016786: Milter add: header: Received-SPF: neutral (quasar.stellarcore.net: 80.171.33.69 is neither permitted nor denied by domain of arcitekt.com) receiver=quasar.stellarcore.net; client-ip=80.171.33.69; helo=d033069.adsl.hansenet.de; envelope-from=aliaqldfkzqmk at arcitekt.com; x-software=spfmilter 0.93 http://www.acme.com/software/spfmilter/;\n", 643) = 643
time(NULL) = 1116600983
poll([{fd=22, events=0}, {fd=16, events=POLLIN}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 21, 100) = 0
poll([{fd=22, events=0}, {fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 21, 28000) = 1
read(16, "", 2048) = 0
time(NULL) = 1116600983
poll([{fd=22, events=0}, {fd=16, events=POLLIN, revents=POLLIN|POLLHUP}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 21, 100) = 1
time(NULL) = 1116600983
close(16) = 0
poll([{fd=22, events=0}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 100) = 0
poll([{fd=22, events=0}, {fd=23, events=0}, {fd=20, events=POLLIN}, {fd=21, events=POLLIN, revents=POLLIN}, {fd=19, events=POLLIN}, {fd=15, events=POLLIN}, {fd=14, events=POLLIN}, {fd=7, events=POLLIN}, {fd=18, events=POLLIN}, {fd=17, events=POLLIN}, {fd=12, events=POLLIN}, {fd=13, events=0}, {fd=11, events=0}, {fd=8, events=POLLIN}, {fd=9, events=0}, {fd=10, events=0}, {fd=4, events=0}, {fd=6, events=POLLIN}, {fd=5, events=POLLIN}, {fd=3, events=POLLIN}], 20, 28000) = 1
More information about the syslog-ng
mailing list