21243 execve("/usr/local/sbin/zabbix_agentd", ["zabbix_agentd"], [/* 15 vars */]) = 0
21243 brk(0)                            = 0x5a000
21243 uname({sys="Linux", node="psd-it.pd.local", ...}) = 0
21243 access("/etc/ld.so.nohwcap", F_OK) = -1 ENOENT (No such file or directory)
21243 access("/etc/ld.so.preload", R_OK) = -1 ENOENT (No such file or directory)
21243 open("/lib/tls/v9/libm.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
21243 stat64("/lib/tls/v9", 0xffb712f8) = -1 ENOENT (No such file or directory)
21243 open("/lib/tls/libm.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
21243 stat64("/lib/tls", 0xffb712f8)    = -1 ENOENT (No such file or directory)
21243 open("/lib/v9/libm.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
21243 stat64("/lib/v9", 0xffb712f8)     = -1 ENOENT (No such file or directory)
21243 open("/lib/libm.so.6", O_RDONLY)  = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0\335`\0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=867768, ...}) = 0
21243 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7fe2000
21243 mmap(NULL, 931744, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7ec8000
21243 mprotect(0xf7f98000, 57344, PROT_NONE) = 0
21243 mmap(0xf7fa6000, 24576, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xce000) = 0xf7fa6000
21243 close(3)                          = 0
21243 open("/lib/librt.so.1", O_RDONLY) = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0\34`\0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=35684, ...}) = 0
21243 mmap(NULL, 99808, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7eac000
21243 mprotect(0xf7eb4000, 57344, PROT_NONE) = 0
21243 mmap(0xf7ec2000, 16384, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0xf7ec2000
21243 close(3)                          = 0
21243 open("/lib/libresolv.so.2", O_RDONLY) = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0/ \0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=76688, ...}) = 0
21243 mmap(NULL, 150608, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7e84000
21243 mprotect(0xf7e96000, 57344, PROT_NONE) = 0
21243 mmap(0xf7ea4000, 16384, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x10000) = 0xf7ea4000
21243 mmap(0xf7ea8000, 3152, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xf7ea8000
21243 close(3)                          = 0
21243 open("/lib/libc.so.6", O_RDONLY)  = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\2\n\240\0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0755, st_size=1501772, ...}) = 0
21243 mmap(NULL, 1572328, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7d04000
21243 mprotect(0xf7e6e000, 57344, PROT_NONE) = 0
21243 mmap(0xf7e7c000, 24576, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x168000) = 0xf7e7c000
21243 mmap(0xf7e82000, 7656, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xf7e82000
21243 close(3)                          = 0
21243 open("/lib/libpthread.so.0", O_RDONLY) = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0P\240\0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0755, st_size=127837, ...}) = 0
21243 mmap(NULL, 173760, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7cd8000
21243 mprotect(0xf7cee000, 65536, PROT_NONE) = 0
21243 mmap(0xf7cfe000, 16384, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x16000) = 0xf7cfe000
21243 mmap(0xf7d02000, 1728, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xf7d02000
21243 close(3)                          = 0
21243 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7fdc000
21243 mprotect(0xf7cfe000, 8192, PROT_READ) = 0
21243 mprotect(0xf7e7c000, 8192, PROT_READ) = 0
21243 mprotect(0xf7ea4000, 8192, PROT_READ) = 0
21243 mprotect(0xf7ec2000, 8192, PROT_READ) = 0
21243 mprotect(0xf7fa6000, 8192, PROT_READ) = 0
21243 mprotect(0xf7fde000, 8192, PROT_READ) = 0
21243 set_tid_address(0xf7fdc738)       = 21243
21243 set_robust_list(0xf7fdc740, 0xc)  = 0
21243 futex(0xffb71bd4, FUTEX_WAKE_PRIVATE, 1) = 0
21243 futex(0xffb71bd4, FUTEX_WAIT_BITSET_PRIVATE|FUTEX_CLOCK_REALTIME, 1, NULL, 53dd1c6e) = -1 EAGAIN (Resource temporarily unavailable)
21243 rt_sigaction(SIGRT_0, {0xf7cdcf80, [], SA_SIGINFO}, NULL, 0xf7ce91f8, 0) = 0
21243 rt_sigaction(SIGRT_1, {0xf7cdce20, [], SA_RESTART|SA_SIGINFO}, NULL, 0xf7ce91f8, 0) = 0
21243 rt_sigprocmask(SIG_UNBLOCK, [RT_0 RT_1], NULL, 8) = 0
21243 getrlimit(RLIMIT_STACK, {rlim_cur=8192*1024, rlim_max=RLIM_INFINITY}) = 0
21243 brk(0)                            = 0x5a000
21243 brk(0x7c000)                      = 0x7c000
21243 open("/usr/local/etc/zabbix_agentd.conf", O_RDONLY|O_LARGEFILE) = 3
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=5812, ...}) = 0
21243 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7fda000
21243 read(3, "# This is a config file for Zabb"..., 4096) = 4096
21243 read(3, "'maxlines',\n#\tprovided in 'log' "..., 4096) = 1716
21243 read(3, "", 4096)                 = 0
21243 close(3)                          = 0
21243 munmap(0xf7fda000, 8192)          = 0
21243 getuid32()                        = 0
21243 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
21243 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
21243 close(3)                          = 0
21243 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
21243 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
21243 close(3)                          = 0
21243 open("/etc/nsswitch.conf", O_RDONLY) = 3
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=517, ...}) = 0
21243 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7fda000
21243 read(3, "# /etc/nsswitch.conf\n#\n# Example"..., 1024) = 517
21243 read(3, "", 1024)                 = 0
21243 close(3)                          = 0
21243 munmap(0xf7fda000, 8192)          = 0
21243 open("/lib/libnss_files.so.2", O_RDONLY) = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0\35\240\0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=51584, ...}) = 0
21243 mmap(NULL, 116272, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7cb8000
21243 mprotect(0xf7cc4000, 57344, PROT_NONE) = 0
21243 mmap(0xf7cd2000, 16384, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0xa000) = 0xf7cd2000
21243 close(3)                          = 0
21243 mprotect(0xf7cd2000, 8192, PROT_READ) = 0
21243 open("/etc/passwd", O_RDONLY|O_CLOEXEC) = 3
21243 fcntl64(3, F_GETFD)               = 0x1 (flags FD_CLOEXEC)
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=1747, ...}) = 0
21243 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7cd6000
21243 read(3, "root:x:0:0:root:/root:/bin/bash\n"..., 1024) = 1024
21243 read(3, "::/var/apache:/bin/sh\nntp:x:104:"..., 1024) = 723
21243 close(3)                          = 0
21243 munmap(0xf7cd6000, 8192)          = 0
21243 setgid32(1986)                    = 0
21243 open("/proc/sys/kernel/ngroups_max", O_RDONLY) = 3
21243 read(3, "65536\n", 31)            = 6
21243 close(3)                          = 0
21243 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
21243 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
21243 close(3)                          = 0
21243 socket(PF_FILE, SOCK_STREAM|SOCK_CLOEXEC|SOCK_NONBLOCK, 0) = 3
21243 connect(3, {sa_family=AF_FILE, path="/var/run/nscd/socket"}, 110) = -1 ENOENT (No such file or directory)
21243 close(3)                          = 0
21243 open("/etc/group", O_RDONLY|O_CLOEXEC) = 3
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=959, ...}) = 0
21243 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7cd6000
21243 _llseek(3, 0, [0], SEEK_CUR)      = 0
21243 read(3, "root:x:0:\ndaemon:x:1:\nbin:x:2:\ns"..., 1024) = 959
21243 read(3, "", 1024)                 = 0
21243 close(3)                          = 0
21243 munmap(0xf7cd6000, 8192)          = 0
21243 open("/lib/libnss_compat.so.2", O_RDONLY) = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0\20\200\0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=35192, ...}) = 0
21243 mmap(NULL, 99552, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7c9c000
21243 mprotect(0xf7ca4000, 57344, PROT_NONE) = 0
21243 mmap(0xf7cb2000, 16384, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0xf7cb2000
21243 close(3)                          = 0
21243 open("/lib/libnsl.so.1", O_RDONLY) = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0:\0\0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=85768, ...}) = 0
21243 mmap(NULL, 159456, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7c74000
21243 mprotect(0xf7c88000, 57344, PROT_NONE) = 0
21243 mmap(0xf7c96000, 16384, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x12000) = 0xf7c96000
21243 mmap(0xf7c9a000, 3808, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xf7c9a000
21243 close(3)                          = 0
21243 mprotect(0xf7c96000, 8192, PROT_READ) = 0
21243 mprotect(0xf7cb2000, 8192, PROT_READ) = 0
21243 open("/lib/libnss_nis.so.2", O_RDONLY) = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0\33\340\0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=43368, ...}) = 0
21243 mmap(NULL, 107880, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7c58000
21243 mprotect(0xf7c62000, 57344, PROT_NONE) = 0
21243 mmap(0xf7c70000, 16384, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x8000) = 0xf7c70000
21243 close(3)                          = 0
21243 mprotect(0xf7c70000, 8192, PROT_READ) = 0
21243 open("/etc/group", O_RDONLY|O_CLOEXEC) = 3
21243 fcntl64(3, F_GETFD)               = 0x1 (flags FD_CLOEXEC)
21243 _llseek(3, 0, [0], SEEK_CUR)      = 0
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=959, ...}) = 0
21243 mmap2(NULL, 959, PROT_READ, MAP_SHARED, 3, 0) = 0xf7fd8000
21243 _llseek(3, 959, [959], SEEK_SET)  = 0
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=959, ...}) = 0
21243 munmap(0xf7fd8000, 959)           = 0
21243 close(3)                          = 0
21243 open("/lib/libnss_winbind.so.2", O_RDONLY) = 3
21243 read(3, "\177ELF\1\2\1\0\0\0\0\0\0\0\0\0\0\3\0\22\0\0\0\1\0\0\26 \0\0\0004"..., 512) = 512
21243 fstat64(3, {st_mode=S_IFREG|0644, st_size=26884, ...}) = 0
21243 mmap(NULL, 114672, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0xf7c3c000
21243 mprotect(0xf7c42000, 65536, PROT_NONE) = 0
21243 mmap(0xf7c52000, 8192, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x6000) = 0xf7c52000
21243 mmap(0xf7c54000, 16368, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0xf7c54000
21243 close(3)                          = 0
21243 lstat64("/tmp/.winbindd", {st_mode=S_IFDIR|0755, st_size=1024, ...}) = 0
21243 lstat64("/tmp/.winbindd/pipe", {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
21243 socket(PF_FILE, SOCK_STREAM, 0)   = 3
21243 fcntl64(3, F_GETFL)               = 0x2 (flags O_RDWR)
21243 fcntl64(3, F_SETFL, O_RDWR|O_NONBLOCK) = 0
21243 fcntl64(3, F_GETFD)               = 0
21243 fcntl64(3, F_SETFD, FD_CLOEXEC)   = 0
21243 connect(3, {sa_family=AF_FILE, path="/tmp/.winbindd/pipe"}, 110) = 0
21243 select(4, [3], NULL, NULL, {0, 0}) = 0 (Timeout)
21243 write(3, "\0\0\0100\0\0\0\0\0\0\0\0\0\0R\373\0\0\10\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 2096) = 2096
21243 select(4, [3], NULL, NULL, {5, 0}) = 1 (in [3], left {4, 999987})
21243 read(3, "\0\0\r\250\0\0\0\2\0\0\0\27\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 3496) = 3496
21243 select(4, [3], NULL, NULL, {0, 0}) = 0 (Timeout)
21243 write(3, "\0\0\0100\0\0\0000\0\0\0\0\0\0R\373\0\0\10\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 2096) = 2096
21243 select(4, [3], NULL, NULL, {5, 0}) = 1 (in [3], left {4, 999988})
21243 read(3, "\0\0\r\313\0\0\0\2\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 3496) = 3496
21243 select(4, [3], NULL, NULL, {5, 0}) = 1 (in [3], left {4, 999989})
21243 read(3, "/var/run/samba/winbindd_privileg"..., 35) = 35
21243 lstat64("/var/run/samba/winbindd_privileged", {st_mode=S_IFDIR|0750, st_size=4096, ...}) = 0
21243 lstat64("/var/run/samba/winbindd_privileged/pipe", {st_mode=S_IFSOCK|0777, st_size=0, ...}) = 0
21243 socket(PF_FILE, SOCK_STREAM, 0)   = 4
21243 fcntl64(4, F_GETFL)               = 0x2 (flags O_RDWR)
21243 fcntl64(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0
21243 fcntl64(4, F_GETFD)               = 0
21243 fcntl64(4, F_SETFD, FD_CLOEXEC)   = 0
21243 connect(4, {sa_family=AF_FILE, path="/var/run/samba/winbindd_privileged/pipe"}, 110) = 0
21243 close(3)                          = 0
21243 select(5, [4], NULL, NULL, {0, 0}) = 0 (Timeout)
21243 write(4, "\0\0\0100\0\0\0\6\0\0\0\0\0\0R\373\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 2096) = 2096
21243 select(5, [4], NULL, NULL, {5, 0}) = 1 (in [4], left {4, 999989})
21243 read(4, "\0\0\r\250\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0\0"..., 3496) = 3496
21243 setgroups32(1, [1986])            = 0
21243 setuid32(1986)                    = 0
21243 setresgid(-1, 1986, -1)           = 0
21243 setresuid(-1, 1986, -1)           = 0
21243 clone(child_stack=0, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0xf7fdc738) = 21244
21243 close(4)                          = 0
21243 exit_group(0)                     = ?