Ethereal-dev: RE: [Ethereal-dev] Interface not listed

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: "Glenn Talbott" <gtalbott@xxxxxxxxxxxxxxx>
Date: Mon, 27 Dec 2004 19:08:01 -0600

> -----Original Message-----
> From: Guy Harris [mailto:gharris@xxxxxxxxx] 
> Sent: Sunday, December 26, 2004 5:17 AM
> To: gtalbott@xxxxxxxxxxxxxxx
> Cc: 'Ethereal development'
> Subject: Re: [Ethereal-dev] Interface not listed
> 
> 
> Glenn Talbott wrote:
> 
> > Hmm... Yes, you are right that config.h (I assume you mean
> > /usr/src/linux-2.4.18-14/include/linux/config.h which
> > Simply says #include linux/autoconf.h)
> 
> No - I was referring to the config.h in the libpcap source tree, as 
> generated by libpcap's configure script.

I installed the binary RPM for libpcap 0.7.2 in July of 2003, some time
after I had installed
RH 8. I don't remember where I got it, but it was built by RH in June of
2003. (I may have
downloaded it or it may have come with RH 8.) Comparing the trace to the
source code (which 
was in the RH 8 distribution) it sure looks like it was built without
HAVE_PROC_NET_DEV.
  
> 
> > does not contain HAVE_PROC_NET_DEV.
> > However I'm not convinced that the failure to find eth1 is 
> a bug in RH 8.
> > The question that comes to mind is if libpcap requires 
> HAVE_PROC_NET_DEV to
> > find eth1, then how does it find eth0? ... Never mind, I 
> found the answer
> > myself. From libpcap-0.7.2/inet.c:
> > 
> >        
> > 
> > #ifdef HAVE_PROC_NET_DEV
> >         if (ret != -1) {
> >                 /*
> >                  * We haven't had any errors yet; now read 
> "/proc/net/dev",
> >                  * and add to the list of interfaces all 
> interfaces listed
> >                  * there that we don't already have, 
> because, on Linux,
> >                  * SIOCGIFCONF reports only interfaces with 
> IPv4 addresses,
> >                  * so you need to read "/proc/net/dev" to 
> get the names of
> >                  * the rest of the interfaces.
> >                  */
> >                 ret = scan_proc_net_dev(&devlist, fd, errbuf);
> >         }
> > #endif
> > 
> > And I have specifically _not_ bound IP to eth1.
> > 
> > So, do newer versions of libpcap know how to workaround the missing
> > HAVE_PROC_NET_DEV in RH 8,
> 
> There's nothing to work around - the config.h from which 
> HAVE_PROC_NET_DEV presumably missing (because it didn't try to read 
> /proc/net/dev) is *part* of libpcap, it's not a configuration file 
> external to libpcap over which libpcap has no control.  Either
> 
> 	1) there's a problem in libpcap's configure script, so 
> that it doesn't 
> find /proc/net/dev even though it's obviously present and 
> readable, at 
> least on your machine

I unpacked the source TAR and ran configure. The config.h produced
contains:
 /* define if you have a /proc/net/dev */
 #define HAVE_PROC_NET_DEV 1

So it looks like the configure script is OK

> 
> or
> 
> 	2) even when HAVE_PROC_NET_DEV is defined, libpcap 
> still doesn't check 
> /proc/net/dev (although looking at the code, that shouldn't 
> happen - and 
> I think I tested it on a Linux box when I wrote that code)

I think this is the problem.

Since I went to the trouble of unpacking the libpcap TAR, I went ahead and
rebuilt it
and reinstalled it. Then I rebuilt and installed ethereal. Same result :-(
eth1 not found, but
if manually entered it works fine.

I have attached the trace output from strace tethereal -D
2>tetherealstderr2.txt for your
reading pleasure. It looks the same as the previous one to me.

> 
> or
> 
> 	3) it wasn't present on the machine on which the 
> configure script was 
> run by Red Hat (in which case perhaps some other mechanism should be 
> used to determine whether libpcap should try to use "/proc/net/dev")
> 
> or
> 
> 	4) Red Hat either didn't bother to run the configure 
> script as part of 
> the build procedure, and instead provided their own 
> hand-built config.h, 
> or ran the configure script and hand-edited it to remove the 
> definition 
> of HAVE_PROC_NET_DEV (in which case they should either stop 
> doing that 
> or should explain why they're doing that and why libpcap 
> should be doing 
> something other than scanning /proc/net/dev)
>

3) and 4) may remain unknown...
 
> or
> 
> 	5) RH 8.0 has "getifaddrs()", but it's a buggy (or, at 
> least, arguably 
> deficient) implementation that assumes the caller is only 
> interested in 
> interfaces with IPv4 addresses and thus only does SIOCGIFCONF 
> (although 
> the one Linux "getifaddrs()" implementation I've seen, the Usagi one, 
> doesn't do that, as I remember).
> 
> Trying libpcap 0.7.2 from http://www.tcpdump.org would be 
> interesting, 
> as it might indicate which of those is the case, and thus indicate 
> whether there's a problem with libpcap or with RH 8.0.
> 
> 

I looked on tcpdump.org, but couldn't find libpcap 0.7.2. Maybe I'm looking
in
the wrong place? Probably a moot point since I had the source TAR already,
and
Confirmed the configure included HAVE_PROC_NET_DEV in config.h when I
rebuilt it.

Regards,

Glenn Talbott
gtalbott@xxxxxxxxxxxxxxx
execve("/usr/local/bin/tethereal", ["tethereal", "-D"], [/* 22 vars */]) = 0
uname({sys="Linux", node="linux2.talbott.home", ...}) = 0
brk(0)                                  = 0x808be28
open("/etc/ld.so.preload", O_RDONLY)    = -1 ENOENT (No such file or directory)
open("/usr/local/lib/i686/mmx/libwiretap.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/lib/i686/mmx", 0xbffff1e0) = -1 ENOENT (No such file or directory)
open("/usr/local/lib/i686/libwiretap.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/lib/i686", 0xbffff1e0) = -1 ENOENT (No such file or directory)
open("/usr/local/lib/mmx/libwiretap.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
stat64("/usr/local/lib/mmx", 0xbffff1e0) = -1 ENOENT (No such file or directory)
open("/usr/local/lib/libwiretap.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0(4\0\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1016832, ...}) = 0
old_mmap(NULL, 130752, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40013000
old_mmap(0x40032000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x1e000) = 0x40032000
close(3)                                = 0
open("/usr/local/lib/libethereal.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0Tv\26\000"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=31864817, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40033000
old_mmap(NULL, 9588476, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40034000
old_mmap(0x4076f000, 1912832, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x73b000) = 0x4076f000
old_mmap(0x40942000, 93948, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40942000
close(3)                                = 0
open("/usr/local/lib/libgmodule-2.0.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=64498, ...}) = 0
old_mmap(NULL, 64498, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40959000
close(3)                                = 0
open("/usr/lib/libgmodule-2.0.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220\16"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=14976, ...}) = 0
old_mmap(NULL, 13916, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40969000
old_mmap(0x4096c000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x2000) = 0x4096c000
close(3)                                = 0
open("/usr/local/lib/libdl.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/libdl.so.2", O_RDONLY)       = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\270\25"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=9184, ...}) = 0
old_mmap(NULL, 12116, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x4096d000
old_mmap(0x4096f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x1000) = 0x4096f000
close(3)                                = 0
open("/usr/local/lib/libglib-2.0.so.0", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/libglib-2.0.so.0", O_RDONLY) = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\270"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=490661, ...}) = 0
old_mmap(NULL, 437920, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40970000
old_mmap(0x409da000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x6a000) = 0x409da000
close(3)                                = 0
open("/usr/local/lib/libm.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/libm.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\2005\0"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=132596, ...}) = 0
old_mmap(NULL, 135168, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x409db000
old_mmap(0x409fb000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x1f000) = 0x409fb000
close(3)                                = 0
open("/usr/local/lib/libz.so.1", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/usr/lib/libz.so.1", O_RDONLY)    = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\30"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=60805, ...}) = 0
old_mmap(NULL, 55308, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x409fc000
old_mmap(0x40a08000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0xb000) = 0x40a08000
close(3)                                = 0
open("/usr/local/lib/libc.so.6", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/lib/libc.so.6", O_RDONLY)        = 3
read(3, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\350U\1"..., 512) = 512
fstat64(3, {st_mode=S_IFREG|0755, st_size=1212940, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40a0a000
old_mmap(NULL, 1222724, PROT_READ|PROT_EXEC, MAP_PRIVATE, 3, 0) = 0x40a0b000
old_mmap(0x40b2e000, 20480, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 3, 0x122000) = 0x40b2e000
old_mmap(0x40b33000, 10308, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40b33000
close(3)                                = 0
munmap(0x40959000, 64498)               = 0
brk(0)                                  = 0x808be28
brk(0x808ce28)                          = 0x808ce28
brk(0)                                  = 0x808ce28
brk(0x808d000)                          = 0x808d000
brk(0)                                  = 0x808d000
brk(0x808e000)                          = 0x808e000
brk(0)                                  = 0x808e000
brk(0x808f000)                          = 0x808f000
brk(0)                                  = 0x808f000
brk(0x8091000)                          = 0x8091000
brk(0)                                  = 0x8091000
brk(0x8092000)                          = 0x8092000
brk(0)                                  = 0x8092000
brk(0x8093000)                          = 0x8093000
brk(0)                                  = 0x8093000
brk(0x8094000)                          = 0x8094000
brk(0)                                  = 0x8094000
brk(0x8095000)                          = 0x8095000
brk(0)                                  = 0x8095000
brk(0x8096000)                          = 0x8096000
brk(0)                                  = 0x8096000
brk(0x8097000)                          = 0x8097000
brk(0)                                  = 0x8097000
brk(0x8098000)                          = 0x8098000
brk(0)                                  = 0x8098000
brk(0x8099000)                          = 0x8099000
brk(0)                                  = 0x8099000
brk(0x809a000)                          = 0x809a000
brk(0)                                  = 0x809a000
brk(0x809c000)                          = 0x809c000
brk(0)                                  = 0x809c000
brk(0x809d000)                          = 0x809d000
brk(0)                                  = 0x809d000
brk(0x809e000)                          = 0x809e000
brk(0)                                  = 0x809e000
brk(0x809f000)                          = 0x809f000
brk(0)                                  = 0x809f000
brk(0x80a0000)                          = 0x80a0000
brk(0)                                  = 0x80a0000
brk(0x80a1000)                          = 0x80a1000
brk(0)                                  = 0x80a1000
brk(0x80a2000)                          = 0x80a2000
brk(0)                                  = 0x80a2000
brk(0x80a3000)                          = 0x80a3000
brk(0)                                  = 0x80a3000
brk(0x80a4000)                          = 0x80a4000
brk(0)                                  = 0x80a4000
brk(0x80a7000)                          = 0x80a7000
brk(0)                                  = 0x80a7000
brk(0x80a8000)                          = 0x80a8000
brk(0)                                  = 0x80a8000
brk(0x80a9000)                          = 0x80a9000
brk(0)                                  = 0x80a9000
brk(0x80aa000)                          = 0x80aa000
brk(0)                                  = 0x80aa000
brk(0x80ab000)                          = 0x80ab000
brk(0)                                  = 0x80ab000
brk(0x80ac000)                          = 0x80ac000
brk(0)                                  = 0x80ac000
brk(0x80ad000)                          = 0x80ad000
brk(0)                                  = 0x80ad000
brk(0x80ae000)                          = 0x80ae000
brk(0)                                  = 0x80ae000
brk(0x80b1000)                          = 0x80b1000
brk(0)                                  = 0x80b1000
brk(0x80b2000)                          = 0x80b2000
brk(0)                                  = 0x80b2000
brk(0x80b3000)                          = 0x80b3000
brk(0)                                  = 0x80b3000
brk(0x80b4000)                          = 0x80b4000
brk(0)                                  = 0x80b4000
brk(0x80b5000)                          = 0x80b5000
brk(0)                                  = 0x80b5000
brk(0x80b6000)                          = 0x80b6000
brk(0)                                  = 0x80b6000
brk(0x80b7000)                          = 0x80b7000
brk(0)                                  = 0x80b7000
brk(0x80b9000)                          = 0x80b9000
brk(0)                                  = 0x80b9000
brk(0x80be000)                          = 0x80be000
brk(0)                                  = 0x80be000
brk(0x80bf000)                          = 0x80bf000
brk(0)                                  = 0x80bf000
brk(0x80c0000)                          = 0x80c0000
brk(0)                                  = 0x80c0000
brk(0x80c1000)                          = 0x80c1000
brk(0)                                  = 0x80c1000
brk(0x80c2000)                          = 0x80c2000
brk(0)                                  = 0x80c2000
brk(0x80c3000)                          = 0x80c3000
brk(0)                                  = 0x80c3000
brk(0x80c9000)                          = 0x80c9000
brk(0)                                  = 0x80c9000
brk(0x80ca000)                          = 0x80ca000
brk(0)                                  = 0x80ca000
brk(0x80cb000)                          = 0x80cb000
brk(0)                                  = 0x80cb000
brk(0x80cc000)                          = 0x80cc000
brk(0)                                  = 0x80cc000
brk(0x80cd000)                          = 0x80cd000
brk(0)                                  = 0x80cd000
brk(0x80d3000)                          = 0x80d3000
brk(0)                                  = 0x80d3000
brk(0x80d4000)                          = 0x80d4000
brk(0)                                  = 0x80d4000
brk(0x80d5000)                          = 0x80d5000
brk(0)                                  = 0x80d5000
brk(0x80d6000)                          = 0x80d6000
brk(0)                                  = 0x80d6000
brk(0x80de000)                          = 0x80de000
brk(0)                                  = 0x80de000
brk(0x80df000)                          = 0x80df000
brk(0)                                  = 0x80df000
brk(0x80e8000)                          = 0x80e8000
brk(0)                                  = 0x80e8000
brk(0x80e9000)                          = 0x80e9000
brk(0)                                  = 0x80e9000
brk(0x80f3000)                          = 0x80f3000
brk(0)                                  = 0x80f3000
brk(0x80fe000)                          = 0x80fe000
brk(0)                                  = 0x80fe000
brk(0x8109000)                          = 0x8109000
brk(0)                                  = 0x8109000
brk(0x810a000)                          = 0x810a000
brk(0)                                  = 0x810a000
brk(0x810b000)                          = 0x810b000
brk(0)                                  = 0x810b000
brk(0x810c000)                          = 0x810c000
brk(0)                                  = 0x810c000
brk(0x810d000)                          = 0x810d000
brk(0)                                  = 0x810d000
brk(0x810e000)                          = 0x810e000
brk(0)                                  = 0x810e000
brk(0x810f000)                          = 0x810f000
brk(0)                                  = 0x810f000
brk(0x811d000)                          = 0x811d000
brk(0)                                  = 0x811d000
brk(0x812b000)                          = 0x812b000
brk(0)                                  = 0x812b000
brk(0x8133000)                          = 0x8133000
brk(0)                                  = 0x8133000
brk(0x8144000)                          = 0x8144000
brk(0)                                  = 0x8144000
brk(0x8149000)                          = 0x8149000
brk(0)                                  = 0x8149000
brk(0x815c000)                          = 0x815c000
brk(0)                                  = 0x815c000
brk(0x8161000)                          = 0x8161000
brk(0)                                  = 0x8161000
brk(0x8176000)                          = 0x8176000
open("/dev/null", O_RDONLY|O_NONBLOCK|O_DIRECTORY) = -1 ENOTDIR (Not a directory)
open("/usr/local/lib/ethereal/plugins/0.10.8", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = 3
fstat64(3, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0
fcntl64(3, F_SETFD, FD_CLOEXEC)         = 0
getdents64(0x3, 0x8142938, 0x1000, 0)   = 1344
getpid()                                = 9272
access("/usr/local/lib/ethereal/plugins/0.10.8/acn.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/acn.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\334\23"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=74689, ...}) = 0
old_mmap(NULL, 16016, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40959000
old_mmap(0x4095c000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x3000) = 0x4095c000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/artnet.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/artnet.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0x&\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=110856, ...}) = 0
old_mmap(NULL, 38732, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x4095d000
old_mmap(0x40964000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x7000) = 0x40964000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/asn1.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/asn1.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0p$\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=140509, ...}) = 0
old_mmap(NULL, 77624, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b36000
old_mmap(0x40b44000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0xe000) = 0x40b44000
old_mmap(0x40b45000, 16184, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40b45000
close(4)                                = 0
getuid32()                              = 0
socket(PF_UNIX, SOCK_STREAM, 0)         = 4
connect(4, {sin_family=AF_UNIX, path="/var/run/.nscd_socket"}, 110) = -1 ENOENT (No such file or directory)
close(4)                                = 0
open("/etc/nsswitch.conf", O_RDONLY)    = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=1750, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40967000
read(4, "#\n# /etc/nsswitch.conf\n#\n# An ex"..., 4096) = 1750
read(4, "", 4096)                       = 0
close(4)                                = 0
munmap(0x40967000, 4096)                = 0
open("/usr/local/lib/libnss_files.so.2", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/etc/ld.so.cache", O_RDONLY)      = 4
fstat64(4, {st_mode=S_IFREG|0644, st_size=64498, ...}) = 0
old_mmap(NULL, 64498, PROT_READ, MAP_PRIVATE, 4, 0) = 0x40b49000
close(4)                                = 0
open("/lib/libnss_files.so.2", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\320\34"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=41324, ...}) = 0
old_mmap(NULL, 44704, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b59000
old_mmap(0x40b63000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x9000) = 0x40b63000
close(4)                                = 0
munmap(0x40b49000, 64498)               = 0
open("/etc/passwd", O_RDONLY)           = 4
fcntl64(4, F_GETFD)                     = 0
fcntl64(4, F_SETFD, FD_CLOEXEC)         = 0
fstat64(4, {st_mode=S_IFREG|0644, st_size=1579, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40967000
read(4, "root:x:0:0:root:/root:/bin/bash\n"..., 4096) = 1579
close(4)                                = 0
munmap(0x40967000, 4096)                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/ciscosm.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/ciscosm.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\344\n\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=53505, ...}) = 0
old_mmap(NULL, 4884, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40967000
old_mmap(0x40968000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x1000) = 0x40968000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/docsis.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/docsis.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0LX\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=884002, ...}) = 0
old_mmap(NULL, 110028, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b64000
old_mmap(0x40b79000, 24576, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x15000) = 0x40b79000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/enttec.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/enttec.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\224\20"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=66599, ...}) = 0
old_mmap(NULL, 16300, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b49000
old_mmap(0x40b4c000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x2000) = 0x40b4c000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/cosnaming.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/cosnaming.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\350\v\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=69209, ...}) = 0
old_mmap(NULL, 13988, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b4d000
old_mmap(0x40b50000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x2000) = 0x40b50000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/coseventcomm.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/coseventcomm.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\244\n\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=59209, ...}) = 0
old_mmap(NULL, 9388, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b51000
old_mmap(0x40b53000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x1000) = 0x40b53000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/gryphon.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/gryphon.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\334\35"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=155751, ...}) = 0
old_mmap(NULL, 49744, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b7f000
old_mmap(0x40b8a000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0xa000) = 0x40b8a000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/irda.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/irda.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\220&\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=162208, ...}) = 0
old_mmap(NULL, 48136, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b8c000
old_mmap(0x40b94000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x8000) = 0x40b94000
old_mmap(0x40b96000, 7176, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x40b96000
close(4)                                = 0
brk(0)                                  = 0x8176000
brk(0x817b000)                          = 0x817b000
access("/usr/local/lib/ethereal/plugins/0.10.8/lwres.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/lwres.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0l\24\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=80854, ...}) = 0
old_mmap(NULL, 19252, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b54000
old_mmap(0x40b58000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x4000) = 0x40b58000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/megaco.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/megaco.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\274\27"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=101140, ...}) = 0
old_mmap(NULL, 31936, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40b98000
old_mmap(0x40b9f000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x7000) = 0x40b9f000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/mgcp.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/mgcp.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\344\36"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=94928, ...}) = 0
old_mmap(NULL, 28596, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40ba0000
old_mmap(0x40ba6000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x6000) = 0x40ba6000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/opsi.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/opsi.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0@\36\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=79411, ...}) = 0
old_mmap(NULL, 22616, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40ba7000
old_mmap(0x40bab000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x3000) = 0x40bab000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/pcli.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/pcli.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\300\v\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=56557, ...}) = 0
old_mmap(NULL, 8800, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40bad000
old_mmap(0x40baf000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x1000) = 0x40baf000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/rdm.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/rdm.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0H\f\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=55267, ...}) = 0
old_mmap(NULL, 9796, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40bb0000
old_mmap(0x40bb2000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x1000) = 0x40bb2000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/rlm.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/rlm.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0008\v\0"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=53886, ...}) = 0
old_mmap(NULL, 9108, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40bb3000
old_mmap(0x40bb5000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x1000) = 0x40bb5000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/rtnet.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/rtnet.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0|\30\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=81450, ...}) = 0
old_mmap(NULL, 20744, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40bb6000
old_mmap(0x40bba000, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x4000) = 0x40bba000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/rudp.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/rudp.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0D\f\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=55104, ...}) = 0
old_mmap(NULL, 9832, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40bbc000
old_mmap(0x40bbe000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x1000) = 0x40bbe000
close(4)                                = 0
access("/usr/local/lib/ethereal/plugins/0.10.8/v5ua.so", F_OK) = 0
open("/usr/local/lib/ethereal/plugins/0.10.8/v5ua.so", O_RDONLY) = 4
read(4, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0\\$\0\000"..., 512) = 512
fstat64(4, {st_mode=S_IFREG|0755, st_size=107907, ...}) = 0
old_mmap(NULL, 44304, PROT_READ|PROT_EXEC, MAP_PRIVATE, 4, 0) = 0x40bbf000
old_mmap(0x40bc7000, 12288, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 4, 0x7000) = 0x40bc7000
close(4)                                = 0
getdents64(0x3, 0x8142938, 0x1000, 0)   = 0
close(3)                                = 0
open("/root/.ethereal/plugins", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY) = -1 ENOENT (No such file or directory)
open("/usr/lib/charset.alias", O_RDONLY|O_LARGEFILE) = -1 ENOENT (No such file or directory)
open("/usr/lib/gconv/gconv-modules.cache", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=21040, ...}) = 0
old_mmap(NULL, 21040, PROT_READ, MAP_SHARED, 3, 0) = 0x40bca000
close(3)                                = 0
brk(0)                                  = 0x817b000
brk(0x817c000)                          = 0x817c000
brk(0)                                  = 0x817c000
brk(0x817d000)                          = 0x817d000
brk(0)                                  = 0x817d000
brk(0x817e000)                          = 0x817e000
brk(0)                                  = 0x817e000
brk(0x817f000)                          = 0x817f000
brk(0)                                  = 0x817f000
brk(0x8180000)                          = 0x8180000
brk(0)                                  = 0x8180000
brk(0x8181000)                          = 0x8181000
brk(0)                                  = 0x8181000
brk(0x8182000)                          = 0x8182000
brk(0)                                  = 0x8182000
brk(0x8183000)                          = 0x8183000
brk(0)                                  = 0x8183000
brk(0x8184000)                          = 0x8184000
brk(0)                                  = 0x8184000
brk(0x818b000)                          = 0x818b000
brk(0)                                  = 0x818b000
brk(0x818c000)                          = 0x818c000
brk(0)                                  = 0x818c000
brk(0x818d000)                          = 0x818d000
brk(0)                                  = 0x818d000
brk(0x818e000)                          = 0x818e000
brk(0)                                  = 0x818e000
brk(0x818f000)                          = 0x818f000
brk(0)                                  = 0x818f000
brk(0x8190000)                          = 0x8190000
brk(0)                                  = 0x8190000
brk(0x8191000)                          = 0x8191000
brk(0)                                  = 0x8191000
brk(0x8192000)                          = 0x8192000
brk(0)                                  = 0x8192000
brk(0x8193000)                          = 0x8193000
brk(0)                                  = 0x8193000
brk(0x8194000)                          = 0x8194000
brk(0)                                  = 0x8194000
brk(0x8195000)                          = 0x8195000
brk(0)                                  = 0x8195000
brk(0x8196000)                          = 0x8196000
brk(0)                                  = 0x8196000
brk(0x8197000)                          = 0x8197000
brk(0)                                  = 0x8197000
brk(0x8198000)                          = 0x8198000
brk(0)                                  = 0x8198000
brk(0x8199000)                          = 0x8199000
brk(0)                                  = 0x8199000
brk(0x819a000)                          = 0x819a000
brk(0)                                  = 0x819a000
brk(0x819b000)                          = 0x819b000
brk(0)                                  = 0x819b000
brk(0x819c000)                          = 0x819c000
brk(0)                                  = 0x819c000
brk(0x819d000)                          = 0x819d000
brk(0)                                  = 0x819d000
brk(0x819e000)                          = 0x819e000
brk(0)                                  = 0x819e000
brk(0x819f000)                          = 0x819f000
open("/usr/lib/locale/locale-archive", O_RDONLY|O_LARGEFILE) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=31215088, ...}) = 0
mmap2(NULL, 2097152, PROT_READ, MAP_PRIVATE, 3, 0) = 0x40bd0000
close(3)                                = 0
brk(0)                                  = 0x819f000
brk(0x81a0000)                          = 0x81a0000
open("/usr/local/share/ethereal/ethereal.conf", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/root/.ethereal/preferences", O_RDONLY) = 3
fstat64(3, {st_mode=S_IFREG|0644, st_size=50588, ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40dd0000
read(3, "# Configuration file for Etherea"..., 4096) = 4096
read(3, "E\n\n######## Printing ########\n\n#"..., 4096) = 4096
read(3, "TRUE\n\n# Novell Servers option 85"..., 4096) = 4096
read(3, "otocol settings.\n# TRUE or FALSE"..., 4096) = 4096
read(3, " file includes UUID information\n"..., 4096) = 4096
read(3, "ensitive).\niscsi.protocol_versio"..., 4096) = 4096
read(3, "Internet Draft version 5, Intern"..., 4096) = 4096
read(3, "ble \"Allow subdissectors to reas"..., 4096) = 4096
read(3, "segments. To use this option, yo"..., 4096) = 4096
read(3, "password changes)\n# A string.\nsa"..., 4096) = 4096
read(3, "her the SNMP OID should be shown"..., 4096) = 4096
read(3, "e reassembled\n# TRUE or FALSE (c"..., 4096) = 4096
read(3, ") [40bit], (A:B:C:D:E:F:G:H:I:J:"..., 4096) = 1436
read(3, "", 4096)                       = 0
close(3)                                = 0
munmap(0x40dd0000, 4096)                = 0
open("/usr/local/share/ethereal/disabled_protos", O_RDONLY) = -1 ENOENT (No such file or directory)
open("/root/.ethereal/disabled_protos", O_RDONLY) = -1 ENOENT (No such file or directory)
uname({sys="Linux", node="linux2.talbott.home", ...}) = 0
socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 3
ioctl(3, 0x8912, 0xbffff860)            = 0
ioctl(3, 0x8912, 0xbffff860)            = 0
ioctl(3, 0x8913, 0x819f010)             = 0
ioctl(3, 0x891b, 0x819f010)             = 0
ioctl(3, 0x8919, 0x819f010)             = 0
ioctl(3, 0x8913, 0x819f030)             = 0
ioctl(3, 0x891b, 0x819f030)             = 0
ioctl(3, 0x8919, 0x819f030)             = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, 0x8933, 0xbffff5c0)            = 0
ioctl(3, 0x8927, 0xbffff5c0)            = 0
ioctl(3, 0x8933, 0xbffff5c0)            = 0
bind(3, {sin_family=AF_PACKET, proto=0x03, if1, pkttype=0, addr(0)={0, }, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
setsockopt(3, SOL_PACKET, PACKET_ADD_MEMBERSHIP, [1], 16) = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_RAW, 768)        = 3
ioctl(3, 0x8933, 0xbffff5c0)            = 0
ioctl(3, 0x8927, 0xbffff5c0)            = 0
ioctl(3, 0x8933, 0xbffff5c0)            = 0
bind(3, {sin_family=AF_PACKET, proto=0x03, if2, pkttype=0, addr(0)={0, }, 20) = 0
getsockopt(3, SOL_SOCKET, SO_ERROR, [0], [4]) = 0
setsockopt(3, SOL_PACKET, PACKET_ADD_MEMBERSHIP, [2], 16) = 0
close(3)                                = 0
socket(PF_PACKET, SOCK_DGRAM, 768)      = 3
ioctl(3, 0x8933, 0xbffff5d0)            = 0
close(3)                                = 0
fstat64(1, {st_mode=S_IFCHR|0620, st_rdev=makedev(136, 1), ...}) = 0
old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40dd0000
write(1, "1. eth0\n", 8)                = 8
write(1, "2. any (Pseudo-device that captu"..., 55) = 55
write(1, "3. lo\n", 6)                  = 6
munmap(0x40dd0000, 4096)                = 0
_exit(0)                                = ?