header,215,2,setaudit(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 37938889 msec,argument,1,0x84b,setaudit:auid,argument,1,0x600005,setaudit:port,argument,1,0xc3499732,setaudit:machine,argument,1,0xffffffff,setaudit:as_success,argument,1,0xffffffff,setaudit:as_failure,argument,1,0xb17,setaudit:asid,subject,2123,root,rjm,root,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,215 header,121,2,doorfs(2) - DOOR_CALL,,Sun 16 Apr 2000 03:33:02 PM EDT, + 37938889 msec,argument,1,0x4,door ID,process,-2,root,root,root,root,209,0,0,0.0.0.0,subject,2123,root,rjm,root,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,121 header,68,2,getaudit(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 37938889 msec,subject,2123,root,rjm,root,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,68 header,128,2,open(2) - read,,Sun 16 Apr 2000 03:33:02 PM EDT, + 37938889 msec,path,/etc/security/audit_event,attribute,100644,root,sys,8388608,22819,0,subject,2123,root,rjm,root,rjm,637,2839,24 5 195.73.151.50,return,success,5,trailer,128 header,152,2,ioctl(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 37938889 msec,path,/etc/security/audit_event,attribute,100644,root,sys,8388608,22819,0,argument,2,0x5401,cmd,argument,3,0xffbef6ec,arg,subject,2123,root,rjm,root,rjm,637,2839,24 5 195.73.151.50,return,failure: Inappropriate ioctl for device,-1,trailer,152 header,139,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,argument,1,0x5,fd,path,/etc/security/audit_event,attribute,100644,root,sys,8388608,22819,0,subject,2123,root,rjm,root,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,139 header,128,2,open(2) - read,,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,path,/etc/security/audit_event,attribute,100644,root,sys,8388608,22819,0,subject,2123,root,rjm,root,rjm,637,2839,24 5 195.73.151.50,return,success,5,trailer,128 header,152,2,ioctl(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,path,/etc/security/audit_event,attribute,100644,root,sys,8388608,22819,0,argument,2,0x5401,cmd,argument,3,0xffbef6ec,arg,subject,2123,root,rjm,root,rjm,637,2839,24 5 195.73.151.50,return,failure: Inappropriate ioctl for device,-1,trailer,152 header,139,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,argument,1,0x5,fd,path,/etc/security/audit_event,attribute,100644,root,sys,8388608,22819,0,subject,2123,root,rjm,root,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,139 header,113,2,cron-invoke,,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,text,crontab-job,text,echo 'Hello there ingolfk',return,success,0,trailer,113 header,80,2,old setuid(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,argument,1,0x84b,uid,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,80 header,136,2,open(2) - read,,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,path,/devices/pseudo/mm@0:null,attribute,20666,root,sys,8388608,34322,3407874,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,5,trailer,136 header,136,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,path,/devices/pseudo/mm@0:null,attribute,20666,root,sys,8388608,34322,3407874,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,136 header,147,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,argument,1,0x5,fd,path,/devices/pseudo/mm@0:null,attribute,20666,root,sys,8388608,34322,3407874,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,147 header,122,2,open(2) - write,creat,,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,path,/tmp/croutAAA1wa4xa,attribute,100600,2123,rjm,1,235939734,4294967295,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,5,trailer,122 header,116,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,path,/var/cron/log,attribute,100600,root,root,8388608,11631,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,116 header,116,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,path,/var/cron/log,attribute,100600,root,root,8388608,11631,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,116 header,133,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,argument,1,0x5,fd,path,/tmp/croutAAA1wa4xa,attribute,100600,2123,rjm,1,235939734,4294967295,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,133 header,123,2,chdir(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 47945943 msec,path,/export/home/ingolfk,attribute,40755,2123,other,8388630,50850,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,123 header,68,2,old nice(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,2,trailer,68 header,119,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,path,/etc/cron.d/FIFO,attribute,10600,root,root,8388608,215,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,119 header,126,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,path,/etc/.name_service_door,attribute,150444,root,root,46923776,386,46661632,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,126 header,152,2,execve(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,path,/usr/bin/sh,attribute,100555,bin,root,8388614,17210,0,exec_args,3,sh,-c,echo 'Hello there ingolfk',subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,152 header,136,2,open(2) - read,,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,path,/devices/pseudo/mm@0:zero,attribute,20666,root,sys,8388608,34323,3407884,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,3,trailer,136 header,114,2,stat(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,path,/usr/bin/sh,attribute,100555,bin,root,8388614,17210,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,114 header,123,2,open(2) - read,,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,path,/usr/lib/libgen.so.1,attribute,100755,bin,bin,8388614,5853,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,4,trailer,123 header,93,2,munmap(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,argument,1,0xff376000,addr,argument,2,0xe000,len,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,93 header,134,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,argument,1,0x4,fd,path,/usr/lib/libgen.so.1,attribute,100755,bin,bin,8388614,5853,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,134 header,121,2,open(2) - read,,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,path,/usr/lib/libc.so.1,attribute,100755,bin,bin,8388614,5838,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,4,trailer,121 header,93,2,munmap(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,argument,1,0xff324000,addr,argument,2,0xe000,len,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,93 header,132,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,argument,1,0x4,fd,path,/usr/lib/libc.so.1,attribute,100755,bin,bin,8388614,5838,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,132 header,122,2,open(2) - read,,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,path,/usr/lib/libdl.so.1,attribute,100755,bin,bin,8388614,5849,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,4,trailer,122 header,133,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,argument,1,0x4,fd,path,/usr/lib/libdl.so.1,attribute,100755,bin,bin,8388614,5849,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,133 header,141,2,open(2) - read,,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,path,/usr/platform/sun4u/lib/libc_psr.so.1,attribute,100755,bin,bin,8388614,11401,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,4,trailer,141 header,152,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 57945242 msec,argument,1,0x4,fd,path,/usr/platform/sun4u/lib/libc_psr.so.1,attribute,100755,bin,bin,8388614,11401,0,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,152 header,147,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 67948381 msec,argument,1,0x3,fd,path,/devices/pseudo/mm@0:zero,attribute,20666,root,sys,8388608,34323,3407884,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,147 header,93,2,munmap(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 67948381 msec,argument,1,0xff360000,addr,argument,2,0x2000,len,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,93 header,68,2,setpgrp(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 67948381 msec,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,191,trailer,68 header,68,2,setpgrp(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 67948381 msec,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,191,trailer,68 header,146,2,ioctl(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 67948381 msec,path,/tmp/croutAAA1wa4xa,attribute,100600,2123,rjm,1,235939734,4294967295,argument,2,0x5401,cmd,argument,3,0xffbefcec,arg,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,failure: Inappropriate ioctl for device,-1,trailer,146 header,136,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 67948381 msec,path,/devices/pseudo/mm@0:null,attribute,20666,root,sys,8388608,34322,3407874,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,136 header,122,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 67948381 msec,path,/tmp/croutAAA1wa4xa,attribute,100600,2123,rjm,1,235939734,4294967295,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,122 header,122,2,close(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 67948381 msec,path,/tmp/croutAAA1wa4xa,attribute,100600,2123,rjm,1,235939734,4294967295,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,122 header,68,2,exit(2),,Sun 16 Apr 2000 03:33:02 PM EDT, + 67948381 msec,subject,2123,2123,rjm,2123,rjm,637,2839,24 5 195.73.151.50,return,success,0,trailer,68